CVE-2013-2810 Command injection in n/a

Critical 10.0 Published 8 Dec 2014 Updated 6 Aug 2024

Remote attackers can execute arbitrary commands on Emerson ROC and DL series RTUs via TCP replay attacks, posing a critical risk to industrial control systems.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-2810?

CVE-2013-2810 is a critical command injection vulnerability in n/a, published on 8 Dec 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.

Weakness: CWE-77

Which versions are affected by CVE-2013-2810?

It affects 6 products.

Products include Emerson Dl 8000 Remote Terminal Unit, Emerson Dl 8000 Remote Terminal Unit Firmware, Emerson Roc 800 Remote Terminal Unit, Emerson Roc 800 Remote Terminal Unit Firmware, Emerson Roc 800l Remote Terminal Unit, Emerson Roc 800l Remote Terminal Unit Firmware.

How do I fix CVE-2013-2810?

No fix has been published for CVE-2013-2810 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2013-2810 being exploited?

There is no known exploitation of CVE-2013-2810 in the wild and no public exploit code.

Sources

Also known as GHSA-x885-qhjh-5vg4.