CVE-2019-13524: Emerson RX3I CPE100 Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.

Affected products

• Emerson RX3I CPE100 Firmware: before r9.85 (fixed in r9.85)
• Emerson RX3I CPE115 Firmware: before r9.85 (fixed in r9.85)
• Emerson RX3I CPE302 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CPE305 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CPE310 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CPE330 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CPE400 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CPL410 Firmware: before r9.90 (fixed in r9.90)
• Emerson RX3I CRU320 Firmware: any version

Published 2020-01-16. Last modified 2026-06-17.