VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 19, 2020· Updated Jun 17, 2026

CVE-2020-6970

CVE-2020-6970

Description

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Emerson/Openenterprise Scada Server2 versions
    cpe:2.3:a:emerson:openenterprise_scada_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:emerson:openenterprise_scada_server:*:*:*:*:*:*:*:*range: >=3.1,<=3.3.3
    • cpe:2.3:a:emerson:openenterprise_scada_server:2.8.3:*:*:*:*:*:*:*
  • Emerson/OpenEnterprisellm-fuzzy3 versions
    2.83 (with Modbus or ROC Interfaces), 3.1 - 3.3.3+ 2 more
    • (no CPE)range: 2.83 (with Modbus or ROC Interfaces), 3.1 - 3.3.3
    • (no CPE)range: 3.1 through 3.3.3
    • (no CPE)range: 2.83 (if Modbus or ROC Interfaces have been installed and are in use)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.