Approved changes feed: RSS · Atom

cpe:2.3:a:emerson:openenterprise_scada_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEmerson (f912a02b-4be0-550b-a08d-4ea8860069db)
ProductOpenenterprise Scada Server (b7472b38-909c-57af-88d8-3aaefc18276c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6970 vulnerable 2026-06-08 05:27:11.367960 Details available
A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.
Published: 2020-02-19T20:19:55.000Z
Updated: 2024-08-04T09:18:02.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-16235 vulnerable 2026-06-08 05:19:27.808813 Emerson OpenEnterprise - Inadequate Encryption Strength
LOW (3.8)
Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.
Published: 2022-05-19T17:23:12.000Z
Updated: 2025-04-16T16:19:26.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10640 vulnerable 2026-06-08 05:16:35.431327 ICSA-20-140-02 Emerson OpenEnterprise
CRITICAL (10)
Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.
Published: 2022-02-24T18:50:15.000Z
Updated: 2025-04-16T16:44:20.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10636 vulnerable 2026-06-08 05:16:35.425529 ICSA-20-140-02 Emerson OpenEnterprise
MEDIUM (6.5)
Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained.
Published: 2022-02-24T18:50:16.000Z
Updated: 2025-04-16T16:44:11.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10632 vulnerable 2026-06-08 05:16:35.418959 ICSA-20-140-02 Emerson OpenEnterprise
HIGH (8.8)
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.
Published: 2022-02-24T18:50:14.000Z
Updated: 2025-04-16T18:01:14.956Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.