CVE-2019-13524
High
Description
GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.
SeverityHigh
CVSS7.5
Exploit probability—
ProductEmerson Rx3i Cpe100 Firmware
PublishedJan 16, 2020
First seenJan 16, 2020
Weakness typeCWE-20Improper input validation
How to fix
Update
- emerson rx3i_cpe100_firmwarer9.85 or later
- emerson rx3i_cpe115_firmwarer9.85 or later
- emerson rx3i_cpe302_firmwarer9.90 or later
- emerson rx3i_cpe305_firmwarer9.90 or later
- emerson rx3i_cpe310_firmwarer9.90 or later
- emerson rx3i_cpe330_firmwarer9.90 or later
- emerson rx3i_cpe400_firmwarer9.90 or later
- emerson rx3i_cpl410_firmwarer9.90 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emerson rx3i_cpe100_firmware | v < r9.85 | r9.85 |
| emerson rx3i_cpe115_firmware | v < r9.85 | r9.85 |
| emerson rx3i_cpe302_firmware | v < r9.90 | r9.90 |
| emerson rx3i_cpe305_firmware | v < r9.90 | r9.90 |
| emerson rx3i_cpe310_firmware | v < r9.90 | r9.90 |
| emerson rx3i_cru320_firmware | No range specified | — |
| emerson rx3i_cpe330_firmware | v < r9.90 | r9.90 |
| emerson rx3i_cpe400_firmware | v < r9.90 | r9.90 |
| emerson rx3i_cpl410_firmware | v < r9.90 | r9.90 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.