CVE-2013-0694

Published: Oct 3, 2013Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere.

Affected (6)

Products: Enea: Ose · Emerson: Dl 8000 Remote Terminal Unit, Roc 800l Remote Terminal Unit, Roc 800 Remote Terminal Unit

1 product

3 products

Dl 8000 Remote Terminal Unit

Roc 800l Remote Terminal Unit

Roc 800 Remote Terminal Unit

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Enea Ose	Up to 2.30
Emerson Dl 8000 Remote Terminal Unit	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Enea Ose	Up to 1.20
Emerson Roc 800l Remote Terminal Unit	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Enea Ose	Up to 3.50
Emerson Roc 800 Remote Terminal Unit	All versions

Related CWEs

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.