ID CVE-2016-9347
Summary An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the DeltaV system, release v13.3, have the SSH (Secure Shell) functionality enabled unnecessarily.
References
Vulnerable Configurations
  • cpe:2.3:o:emerson:se4801t0x_redundant_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
    cpe:2.3:o:emerson:se4801t0x_redundant_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
  • cpe:2.3:h:emerson:se4801t0x_redundant_wireless_i\/o_card:-:*:*:*:*:*:*:*
    cpe:2.3:h:emerson:se4801t0x_redundant_wireless_i\/o_card:-:*:*:*:*:*:*:*
  • cpe:2.3:o:emerson:se4801t1x_simplex_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
    cpe:2.3:o:emerson:se4801t1x_simplex_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
  • cpe:2.3:h:emerson:se4801t1x_simplex_wireless_i\/o_card:-:*:*:*:*:*:*:*
    cpe:2.3:h:emerson:se4801t1x_simplex_wireless_i\/o_card:-:*:*:*:*:*:*:*
CVSS
Base: 5.4 (as of 13-03-2017 - 16:52)
Impact:
Exploitability:
CWE CWE-254
CAPEC
Access
VectorComplexityAuthentication
ADJACENT_NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:A/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 94586
misc https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03
Last major update 13-03-2017 - 16:52
Published 13-02-2017 - 21:59
Last modified 13-03-2017 - 16:52
Back to Top