CVE-2023-51761 Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication

High 8.3 Published Updated

Unauthenticated attackers with network access can bypass authentication to gain admin capabilities on Emerson Rosemount GC gas chromatographs.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2023-51761?

CVE-2023-51761 is a high-severity authentication bypass vulnerability in Emerson Rosemount GC1500XA, published on 9 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.

Weakness: CWE-287, CWE-863

Which versions are affected by CVE-2023-51761?

It affects 3 products.

Products include Emerson Gc1500xa Firmware, Emerson Gc370xa Firmware, Emerson Gc700xa Firmware.

How do I fix CVE-2023-51761?

No fix has been published for CVE-2023-51761 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2023-51761 being exploited?

There is no known exploitation of CVE-2023-51761 in the wild and no public exploit code.

Sources

Also known as GHSA-j2p9-482v-5wj6.

Is CVE-2023-51761 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free