CVE-2019-10965: Emerson Ovation OCR400 Firmware

High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days.

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.

Affected products

• Emerson Ovation OCR400 Firmware: up to and including 3.3.1

Published 2019-05-28. Last modified 2026-06-17.