What’s Vulnerable › Vulnerabilities

CVE-2013-0689

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-03 · updated 2026-06-16
• Weakness: CWE-94

Description

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.

Affected products

• Emerson Dl 8000 Remote Terminal Unit: all versions
• Emerson Roc 800 Remote Terminal Unit: all versions
• Emerson Roc 800L Remote Terminal Unit: all versions
• Enea Ose: through 1.20; through 3.50; through 2.30

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
• http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01

Get alerted when CVE-2013-0689 or the next vulnerability affects your stack