Emerson Appleton UPSMON-PRO
view advisory published 2025-11-20
Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3871US | — | — | ||
The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and s… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-324-06 JSONself
- ICSA Advisory ICSA-25-324-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationAppleton UPSMON-PRO
Block UDP port 2601 at firewall level for all UPSMON-PRO installations
- FixedAppleton UPSMON-PRO
According to Emerson, Appleton UPSMON-PRO is End of Life and unsupported. Any users still using the product are recommended to replace the product or apply the following mitigations based on your company policies and Cybersecurity Operational recommendations.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan