VULNERABILITY INTELLIGENCE
CVE-2013-0689
CVSS score10 HIGH
EPSS probability5.04%
CISA KEVNot currently listed
Published2013-10-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')
Primary references
- ics-cert@hq.dhs.gov — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource