CVEvulnerability

CVE-2019-13524

7.5 HIGH Published 2020-01-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.

Affected configurations

• emerson rx3i cpe100 firmware (< r9.85) • emerson rx3i cpe115 firmware (< r9.85) • emerson rx3i cpe302 firmware (< r9.90) • emerson rx3i cpe305 firmware (< r9.90) • emerson rx3i cpe310 firmware (< r9.90) • emerson rx3i cru320 firmware • emerson rx3i cpe330 firmware (< r9.90) • emerson rx3i cpe400 firmware (< r9.90) • emerson rx3i cpl410 firmware (< r9.90)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References