PT-2013-1702 · Emerson · Deltav Se3006+1

Publicado 2013-03-11 · Atualizado 2013-03-18 · CVE-2012-4703

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Emerson DeltaV SE3006 versions 11.3.1 and earlier Emerson DeltaV VE3005 versions 10.3.1 and earlier, 11.x through 11.3.1 Emerson DeltaV VE3006 versions 10.3.1 and earlier, 11.x through 11.3.1

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by sending a crafted packet to specific ports. The affected ports include TCP port 23, UDP port 161, and TCP port 513.

Recommendations For Emerson DeltaV SE3006 version 11.3.1 and earlier, update to a version later than 11.3.1 to resolve the issue. For Emerson DeltaV VE3005 versions 10.3.1 and earlier, update to a version later than 10.3.1 to resolve the issue. For Emerson DeltaV VE3005 version 11.x through 11.3.1, update to a version later than 11.3.1 to resolve the issue. For Emerson DeltaV VE3006 versions 10.3.1 and earlier, update to a version later than 10.3.1 to resolve the issue. For Emerson DeltaV VE3006 version 11.x through 11.3.1, update to a version later than 11.3.1 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-4703

Produtos afetados

Deltav Se3006

Deltav Ve3005

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-4703 · Nota de Segurança
• http://ics-cert.us-cert.gov/pdf/ICSA-13-053-01.pdf · Nota