Emerson ROC827 Firmware vulnerabilities

2 CVEs affecting Emerson ROC827 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-1935, published 2023-08-02.

More from Emerson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-1935, published 2023-08-02. Critical severity, CVSS 9.4. EPSS: 0.7% chance of exploitation in the next 30 days. ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service…
• CVE-2022-30264, published 2022-08-16. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master…