CVE-2019-13524
CVSS V2 High 7.8
CVSS V3 High 7.5
Description
GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.
Overview
- CVE ID
- CVE-2019-13524
- Assigner
- ics-cert@hq.dhs.gov
- Vulnerability Status
- Analyzed
- Published Version
- 2020-01-16T18:15:11
- Last Modified Date
- 2020-01-27T17:08:32
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe100_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.85 | |
cpe:2.3:h:emerson:rx3i_cpe100:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe115_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.85 | |
cpe:2.3:h:emerson:rx3i_cpe115:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe302_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpe302:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe305_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpe305:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe310_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpe310:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cru320_firmware:*:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:h:emerson:rx3i_cru320:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe330_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpe330:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpe400_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpe400:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:emerson:rx3i_cpl410_firmware:*:*:*:*:*:*:*:* | 1 | OR | r9.90 | |
cpe:2.3:h:emerson:rx3i_cpl410:-:*:*:*:*:*:*:* | 0 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:N/C:N/I:N/A:C
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- NONE
- Availability Impact
- COMPLETE
- Base Score
- 7.8
- Severity
- HIGH
- Exploitability Score
- 10
- Impact Score
- 6.9
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality Impact
- NONE
- Availability Impact
- HIGH
- Base Score
- 7.5
- Base Severity
- HIGH
- Exploitability Score
- 3.9
- Impact Score
- 3.6
References
Reference URL | Reference Tags |
---|---|
https://www.us-cert.gov/ics/advisories/icsa-20-014-01 | Patch Third Party Advisory US Government Resource |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2019-13524 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13524 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 16:52:25 | Added to TrackCVE | |||
2022-12-04 09:45:15 | 2020-01-16T18:15Z | 2020-01-16T18:15:11 | CVE Published Date | updated |
2022-12-04 09:45:15 | 2020-01-27T17:08:32 | CVE Modified Date | updated | |
2022-12-04 09:45:15 | Analyzed | Vulnerability Status | updated |