CVE-2019-13524

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.
References
Link Resource
https://www.us-cert.gov/ics/advisories/icsa-20-014-01 Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe100:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe115_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe115:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe302_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe302:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe305_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe305:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe310:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:emerson:rx3i_cru320_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cru320:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe330_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe330:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpe400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpe400:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:emerson:rx3i_cpl410_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:emerson:rx3i_cpl410:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-01-16 18:15

Updated : 2024-02-28 17:28


NVD link : CVE-2019-13524

Mitre link : CVE-2019-13524

CVE.ORG link : CVE-2019-13524


JSON object : View

Products Affected

emerson

  • rx3i_cpe302
  • rx3i_cpl410_firmware
  • rx3i_cru320_firmware
  • rx3i_cpe305
  • rx3i_cpe400_firmware
  • rx3i_cpe400
  • rx3i_cpe310
  • rx3i_cpl410
  • rx3i_cpe330_firmware
  • rx3i_cpe115_firmware
  • rx3i_cpe305_firmware
  • rx3i_cpe100
  • rx3i_cpe310_firmware
  • rx3i_cpe115
  • rx3i_cpe100_firmware
  • rx3i_cpe330
  • rx3i_cpe302_firmware
  • rx3i_cru320
CWE
CWE-20

Improper Input Validation