CVE-2020-10632highCWE-282

CVE-2020-10632: high-severity vulnerability in Emerson OpenEnterprise SCADA Software

ICSA-20-140-02 Emerson OpenEnterprise

Published · Updated

Follow this CVE+ Monitor OpenEnterprise SCADA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.5%
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Emerson · OpenEnterprise SCADA Software
Related CVEs — Emerson OpenEnterprise SCADA Software

In the same product, most dangerous first.

CVE-2020-10640CRITICALICSA-20-140-02 Emerson OpenEnterpriseEPSS 3.1%CVE-2020-10636MEDIUMICSA-20-140-02 Emerson OpenEnterpriseEPSS 0.3%