CVE-2013-0692

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-03 · updated 2026-06-16
Weakness: CWE-264

Description

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service.

Affected products

Emerson Dl 8000 Remote Terminal Unit: all versions
Emerson Roc 800 Remote Terminal Unit: all versions
Emerson Roc 800L Remote Terminal Unit: all versions
Enea Ose: through 1.20; through 3.50; through 2.30

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01

Get alerted when CVE-2013-0692 or the next vulnerability affects your stack