PT-2024-1482

CVE-2023-49716

Published

2024-01-30

Updated

2024-02-15

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Emerson Rosemount GC370XA, GC700XA, GC1500XA (affected versions not specified)

Description The issue is related to the lack of measures to neutralize special elements used in the operating system command. This could allow a remote attacker to execute arbitrary commands. An authenticated user with network access could run arbitrary commands from a remote computer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vera Mens

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers

CVE-2023-49716

BDU:2024-00989