Vulnerability · Published Aug 2, 2023 · Assigned by icscert
CVE-2023-1935CVE-2023-1935
Critical 9.4
In plain English
A critical-severity security flaw in DL8000 from Emerson Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)9.4Critical
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Emerson Electric | DL8000 | All |
| Emerson Electric | ROC827 | All |
| Emerson Electric | ROC809L | All |
| Emerson Electric | ROC827 | All |
| Emerson Electric | ROC809 | All |