What’s Vulnerable › Vulnerabilities

CVE-2020-10632: ICSA-20-140-02 Emerson OpenEnterprise

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-24 · updated 2026-06-17
• Weakness: CWE-282

Description

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.

Affected products

• Emerson OpenEnterprise SCADA Software: through 3.3.4

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02

Get alerted when CVE-2020-10632 or the next vulnerability affects your stack