CVE-2013-0694: The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and...

Security readout for executives and security teams

Certain Emerson ROC800, DL8000, and ROC800L remote terminal units contain hardcoded ROM credentials. If an attacker knows those credentials from another installation, they may gain shell access to the device operating system. This affects operational technology, so exposure matters even though the supplied sources do not provide CVSS scoring or active exploitation evidence. Likely exposure is limited to organizations operating the named Emerson RTUs on the affected software versions, especially where management or device services are reachable over routable networks. Treat this as a high-priority OT exposure review, not a panic event. The risk is serious because shell access to field equipment can affect operations, but the supplied evidence does not show known active exploitation. Mitigation focus: Inventory ROC800, DL8000, and ROC800L RTUs and record software versions.; Check Emerson and CISA ICSA-13-259-01 guidance for supported remediation.; Remove unnecessary remote reachability to affected RTUs where operationally feasible..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.