Vulnerability Details : CVE-2016-9347
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards (WIOC) running the firmware available in the DeltaV system, release v13.3, have the SSH (Secure Shell) functionality enabled unnecessarily.
Products affected by CVE-2016-9347
- cpe:2.3:o:emerson:se4801t0x_redundant_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
- cpe:2.3:o:emerson:se4801t1x_simplex_wireless_i\/o_card_firmware:13.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-9347
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 20 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-9347
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.4
|
MEDIUM | AV:A/AC:M/Au:N/C:P/I:P/A:P |
5.5
|
6.4
|
NIST | |
|
5.0
|
MEDIUM | CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
1.6
|
3.4
|
NIST |
CWE ids for CVE-2016-9347
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-9347
-
https://ics-cert.us-cert.gov/advisories/ICSA-16-334-03
Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability | CISAThird Party Advisory;US Government Resource
-
http://www.securityfocus.com/bid/94586
Multiple Emerson Products CVE-2016-9347 Security Bypass VulnerabilityThird Party Advisory;VDB Entry
Jump to