CVE-2019-13524 is a denial-of-service vulnerability affecting various GE PACSystems RX3i and CRU/320 controllers, specifically versions prior to R9.85 for CPE100/115 and R9.90 for CPE302/305/310/330/400/410. An unauthenticated attacker can send specially crafted packets to force the module into a halt-mode, requiring a manual reboot and battery removal to restore operation. This vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector, low attack complexity, and high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< r9.85CPE matchmatch criteria | cpe:2.3:o:emerson:rx3i_cpe100_firmware:*:*:*:*:*:*:*:* | ||
< r9.85CPE matchmatch criteria | cpe:2.3:o:emerson:rx3i_cpe115_firmware:*:*:*:*:*:*:*:* | ||
< r9.90CPE matchmatch criteria | cpe:2.3:o:emerson:rx3i_cpe302_firmware:*:*:*:*:*:*:*:* | ||
< r9.90CPE matchmatch criteria | cpe:2.3:o:emerson:rx3i_cpe305_firmware:*:*:*:*:*:*:*:* | ||
< r9.90CPE matchmatch criteria | cpe:2.3:o:emerson:rx3i_cpe310_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.