CVE-2023-51761
EUVD-2023-5645209.02.2024, 04:15
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| emerson | gc370xa_firmware | 4.1.5 |
| emerson | gc700xa_firmware | 4.1.5 |
| emerson | gc1500xa_firmware | 4.1.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
- CWE-287 - Improper AuthenticationWhen an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
References