CVE-2020-12030criticalCWE-284

CVE-2020-12030: critical vulnerability in Emerson Wireless 1410 Gateway

Emerson WirelessHART Gateway

Published · Updated

Follow this CVE+ Monitor Wireless 1410 Gateway+ Monitor Wireless 1420 Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10epss 1.1%
There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Emerson · Wireless 1410 GatewayEmerson · Wireless 1420 GatewayEmerson · Wireless 1552WU Gateway