{"id":"CVE-2023-51761","state":"PUBLISHED","title":"Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication","description":"In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.","publishedAt":"2024-02-09T03:41:37.457Z","updatedAt":"2025-06-10T18:52:34.491Z","severity":{"score":8.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"icscert"},"assigner":"icscert","products":["Emerson Rosemount GC370XA","Emerson Rosemount GC700XA","Emerson Rosemount GC1500XA"],"affected":[{"vendor":"Emerson","product":"Rosemount GC370XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]},{"vendor":"Emerson","product":"Rosemount GC700XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]},{"vendor":"Emerson","product":"Rosemount GC1500XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01","https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/51xxx/CVE-2023-51761.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-51761","state":"PUBLISHED","datePublished":"2024-02-09T03:41:37.457Z","dateUpdated":"2025-06-10T18:52:34.491Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2024-01-03T00:41:24.585Z"},"containers":{"cna":{"title":"Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication","descriptions":[{"lang":"en","value":"In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities."}],"affected":[{"vendor":"Emerson","product":"Rosemount GC370XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]},{"vendor":"Emerson","product":"Rosemount GC700XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]},{"vendor":"Emerson","product":"Rosemount GC1500XA","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"Version 4.1.5","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01"},{"url":"https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"CWE-863 Incorrect Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2025-06-10T18:52:34.491Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Vera Mens of Claroty Research reported these vulnerabilities to Emerson."}],"datePublic":"2024-01-30T17:00:00.000Z","solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Emerson recommends end users update the affected products' firmware. For update information, contact </span><a target=\"_blank\" rel=\"nofollow\">Emerson Tech Support</a><span style=\"background-color: rgb(255, 255, 255);\">. Emerson recommends end users continue to use current cybersecurity industry best practices, and in the event such infrastructure is not implemented within an end user's network, the user should take action to ensure the affected product is connected to a well-protected network and not connected to the Internet. For more information, refer to the </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.emerson.com/en-us/support/security-notifications\">Emerson Security</a><span style=\"background-color: rgb(255, 255, 255);\">&nbsp;web page.</span>\n\n<br>"}],"value":"Emerson recommends end users update the affected products' firmware. For update information, contact  Emerson Security https://www.emerson.com/en-us/support/security-notifications  web page."}],"source":{"advisory":"ICSA-24-030-01","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-51761","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-02-09T19:11:47.314496Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-05T17:20:48.797Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01","tags":["x_transferred"]},{"url":"https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T22:48:11.069Z"}}]}}}