2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"DL8000","vendor":"Emerson Electric","versions":[{"status":"affected","version":"All"}]},{"product":"ROC827","vendor":"Emerson Electric","versions":[{"status":"affected","version":"All"}]},{"product":"ROC809L","vendor":"Emerson Electric","versions":[{"status":"affected","version":"All"}]},{"product":"ROC827","vendor":"Emerson Electric","versions":[{"status":"affected","version":"All"}]},{"product":"ROC809","vendor":"Emerson Electric","versions":[{"status":"affected","version":"All"}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:emerson:roc809_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"18077D47-9CE0-43BB-AEF2-C36B860068F4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:emerson:roc809:*:*:*:*:*:*:*:*","matchCriteriaId":"1D7BF172-D25F-4FA4-9F3D-076054DC2B6B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:emerson:roc827_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"18ED69F7-497D-46F7-8658-E896BB97FE0E","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:emerson:roc827:*:*:*:*:*:*:*:*","matchCriteriaId":"DF43B58B-549D-49AC-A6CD-D56A51D514E4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:emerson:roc809l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FC76BA18-6D73-4DF8-99F9-3746874B87CE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:emerson:roc809l:-:*:*:*:*:*:*:*","matchCriteriaId":"1E166C44-92E0-4FF1-8E72-926B3DBFD685","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:emerson:roc827l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"025DE80C-CF6E-454E-B031-872BA0316ADE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:emerson:roc827l:-:*:*:*:*:*:*:*","matchCriteriaId":"6BC649A2-40AE-439F-AD70-70ADB3E8BC11","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:emerson:dl8000_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"DAF643AE-8D62-41EE-AEB5-414094F299E3","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:emerson:dl8000:*:*:*:*:*:*:*:*","matchCriteriaId":"C771FBBB-0FEA-4BE4-A251-58C9EBD07E12","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition."}],"id":"CVE-2023-1935","lastModified":"2026-06-17T05:29:04.140","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.5,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1935","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-21T18:57:37.798124Z","version":"2.0.3"}}]},"published":"2023-08-02T23:15:10.293","references":[{"source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-206-03"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-206-03"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"nvd@nist.gov","type":"Primary"}]}
|