CVE:CVE-2019-13524
CNNVD:CNNVD-202001-539
GE PACSystems RX3i CPE100和GE CPE302都是美国通用电气（GE）公司的产品。GE PACSystems RX3i CPE100是一款工业互联网控制器。GE CPE302是一款互联网工业控制器。
多款GE产品中存在输入验证错误漏洞。攻击者可通过发送特制的数据包利用该漏洞导致模块状态更改为暂停模式，进而造成拒绝服务。以下产品及版本受到影响：GE PACSystems RX3i CPE100 R9.85之前版本；CPE115 115R9.85之前版本；CPE302 R9.90之前版本；CPE302 305 R9.90之前版本；CPE302 310 R9.90之前版本；CPE302 330 R9.90之前版本；CPE302 400 R9.90之前版本；CPE302 410 R9.90之前版本；CRU320(End of Life)。
solution:Upgrade emerson rx3i_cpe100_firmware to a higher version than r9.85,and avoid the version (,r9.85); Upgrade emerson rx3i_cpe115_firmware to a higher version than r9.85,and avoid the version (,r9.85); Upgrade emerson rx3i_cpe302_firmware to a higher version than r9.90,and avoid the version (,r9.90); Upgrade emerson rx3i_cpe305_firmware to a higher version than r9.90,and avoid the version (,r9.90); Upgrade emerson rx3i_cpe310_firmware to a higher version than r9.90,and avoid the version (,r9.90); Upgrade emerson rx3i_cru320_firmware to a higher version than *; Upgrade emerson rx3i_cpe330_firmware to a higher version than r9.90,and avoid the version (,r9.90); Upgrade emerson rx3i_cpe400_firmware to a higher version than r9.90,and avoid the version (,r9.90); Upgrade emerson rx3i_cpl410_firmware to a higher version than r9.90,and avoid the version (,r9.90)