CVE:CVE-2022-30264
CNNVD:CNNVD-202208-2938
Emerson ROC800等都是美国Emerson公司的产品。Emerson ROC800是一系列远程操作控制器。Emerson ROC800L是一系列远程操作控制器。Emerson DL8000是一系列电子预设控制器。
Emerson ROC800、ROC800L、DL8000存在安全漏洞，该漏洞源于数据真实性验证不足。攻击者利用该漏洞读取、写入和删除文件或文件夹。
solution:Upgrade emerson dl8000_firmware to a higher version than 2022-05-02,and avoid the version (,2022-05-02]; Upgrade emerson roc809_firmware to a higher version than 2022-05-02,and avoid the version (,2022-05-02); Upgrade emerson roc800l_firmware to a higher version than 2022-05-02,and avoid the version (,2022-05-02]; Upgrade emerson fb3000_rtu_firmware to a higher version than 2022-05-02,and avoid the version (,2022-05-02]; Upgrade emerson roc827_firmware to a higher version than 2022-05-02,and avoid the version (,2022-05-02)