ICSA-24-030-01
·
Published 2025-06-10
·
View on CISA ICS-CERT ↗
Emerson Rosemount GC370XA, GC700XA, GC1500XA
CVSS 9.8
CRITICAL
Risk Summary
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker with network access to run arbitrary commands, access sensitive information, cause a denial-of-service condition, and bypass authentication to acquire admin capabilities.
Remediations
- Emerson recommends end users update the affected products' firmware. For update information, contact Emerson Tech Support ([email protected]). Emerson recommends end users continue to use current cybersecurity industry best practices, and in the event such infrastructure is not implemented within an end user's network, the user should take action to ensure the affected product is connected to a well-protected network and not connected to the Internet.
- For more information, refer to the Emerson Security web page.
Affected Vendors
Emerson
Affected Products (3)
Emerson
·
GC370XA
<=4.1.5
Emerson
·
GC700XA
<=4.1.5
Emerson
·
GC1500XA
<=4.1.5
Affected Sectors
Energy, Chemical
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more