Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-46687

Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Emerson Rosemount GC370XA

Default version status: unaffected

  • 0 to ≤ Version 4.1.5affected

Emerson Rosemount GC700XA

Default version status: unaffected

  • 0 to ≤ Version 4.1.5affected

Emerson Rosemount GC1500XA

Default version status: unaffected

  • 0 to ≤ Version 4.1.5affected

References