Emerson vulnerabilities, page 4

83 vulnerabilities

Known vulnerabilities in Emerson products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 103 products.

5.5MediumCVE-2022-29964emerson · deltav_distributed_control_system_sq_controller_firmware +23 moreemerson deltav_distributed_control_system_sq_controller_firmwareThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350.EPSS0.24%5.5MediumCVE-2022-29959emerson · openbsiemerson openbsiEmerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users are stored insecurely in the SecUsers.ini file by using a simple string transformation rather than a cryptographic mechanism.EPSS0.26%7.8HighCVE-2022-30262emerson · controlwave_micro_firmware +1 moreemerson controlwave_micro_firmwareThe Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.EPSS0.18%9.8CriticalCVE-2022-30264emerson · dl8000_firmware +4 moreemerson dl8000_firmwareThe Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.EPSS0.53%7.8HighCVE-2022-30260emerson · deltav_distributed_control_system_sq_controller_firmware +23 moreemerson deltav_distributed_control_system_sq_controller_firmwareEmerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.EPSS0.16%8.5HighCVE-2022-50930emerson · emerson pac machine editionEmerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service PathEmerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem permissions during service startup.EPSS0.16%4.3MediumCVE-2012-1814emerson · deltav +2 moreemerson deltavCross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.EPSS1.32%5MediumCVE-2012-1816emerson · deltav +2 moreemerson deltavPORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111.EPSS1.92%6.4MediumCVE-2012-1818emerson · deltav +2 moreemerson deltavAn unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.EPSS1.86%7.5HighCVE-2012-1817emerson · deltav +2 moreemerson deltavBuffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file.EPSS3.93%7.5HighCVE-2012-1815emerson · deltav +2 moreemerson deltavSQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.EPSS1.49%6.1MediumCVE-2012-4703emerson · deltav_se3006_sd_plus_controller +2 moreemerson deltav_se3006_sd_plus_controllerThe Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service (device restart) via a crafted packet on (1) TCP port 23, (2) UDP port 161, or (3) TCP port 513.EPSS0.86%5MediumCVE-2012-3035emerson · deltavemerson deltavBuffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port.EPSS2.19%7.8HighCVE-2024-1156emerson · data_record_ad +9 moreemerson data_record_adIncorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.EPSS0.35%7.8HighCVE-2024-1155emerson · data_record_ad +9 moreIncorrect permissions for shared NI SystemLink Elixir based servicesIncorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.EPSS0.27%7.8HighCVE-2019-13524emerson · rx3i_cpe100_firmware +7 moreemerson rx3i_cpe100_firmwareGE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.EPSS1.55%8.8HighCVE-2019-10967emerson · emerson ovation ocr400 controller +1 moreemerson emerson ovation ocr400 controllerIn Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.EPSS3.68%8.8HighCVE-2019-10965emerson · emerson ovation ocr400 controller +1 moreemerson emerson ovation ocr400 controllerIn Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.EPSS3.59%6.1MediumCVE-2019-12167emerson · liebert_challenger_firmwareemerson liebert_challenger_firmwarehttpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter.EPSS1.14%8.3HighCVE-2023-51761emerson · gc1500xa_firmware +5 moreEmerson Rosemount GC370XA, GC700XA, GC1500XA Improper AuthenticationIn Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.EPSS0.68%