Emerson ROC800 Multiple Vulnerabilities (Update B)

An attacker with network access to the device could bypass authentication, inject commands, or use embedded credentials to gain control over the remote operations controller, potentially allowing them to modify process setpoints, disable alarms, or halt critical operations.

This vulnerability affects water authorities and electric utilities using Emerson remote operations controllers (ROC800, ROC800L) and data loggers (DL8000) in SCADA and process control systems. Equipment operators responsible for pump stations, water treatment, generator controls, or other critical automation systems should prioritize assessment.

An attacker on the network sends a crafted request to the device exploiting missing input validation or hardcoded credentials embedded in the firmware. If successful, the attacker gains unauthenticated access to the command interface and can execute arbitrary operations on the controller.