CVE-2020-10640

9.8 criticalEPSS 3.1%

Critical (9.8) in emerson openenterprise scada server. EPSS 3.1% chance of exploitation in the next 30 days.

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2022-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

emerson:openenterprise_scada_server

References

https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02
https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02

Check your stack JSON