Vulnerability in Emerson Openenterprise Scada Software
CVE-2020-10632
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.
EPSS: 0.001 (23.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Emerson Openenterprise Scada Software — versions unspecified
Weakness classification (CWE)
References
- www.cisa.gov/uscert/ics/advisories/icsa-20-140-02 (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2020-10632?
- CVE-2020-10632 is a high-severity vulnerability in Emerson Openenterprise Scada Software, classified under CWE-282. CVSS score: 8.8/10. Published 2022-02-24.
- How severe is CVE-2020-10632?
- High severity. CVSS v3 base score is 8.8 out of 10.