Emerson Ams Device Manager vulnerabilities

3 CVEs affecting Emerson Ams Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14808, published 2018-10-01.

More from Emerson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-14804, published 2018-10-01. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. Emerson AMS Device Manager v12.0 to v13.5. A specially crafted script may be run that allows arbitrary remote code execution.
• CVE-2015-1008, published 2015-05-26. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input.
• CVE-2018-14808, published 2018-10-01. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Emerson AMS Device Manager v12.0 to v13.5. Non-administrative users are able to change executable and library files on the affected products.