Deltav

This hub aggregates every CVE we track for Deltav, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Deltav.

• CVE-2022-29957The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols incl...7.8Jul 26, 2022
• CVE-2022-29962The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affec...5.5Jul 26, 2022
• CVE-2022-29964The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded creden...5.5Jul 26, 2022
• CVE-2022-29963The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. Thi...5.5Jul 26, 2022
• CVE-2022-29965The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) o...5.5Jul 26, 2022
• CVE-2021-44463Emerson DeltaV Uncontrolled Search Path Element8.1Jan 28, 2022
• CVE-2018-19021A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker...6.5Jan 25, 2019
• CVE-2018-14791Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products.7.8Aug 23, 2018
• CVE-2018-14797Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary ...7.8Aug 23, 2018
• CVE-2018-14793DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution.8.8Aug 21, 2018
• CVE-2018-14795DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files.8.8Aug 21, 2018
• CVE-2016-9345An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within t...6.8Feb 13, 2017
• CVE-2014-2349Emerson DeltaV Use of Improper Authorization6.2May 22, 2014
• CVE-2014-2350Emerson DeltaV Use of Hard-coded Credentials2.4May 22, 2014
• CVE-2012-3035Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port.5.0Oct 1, 2012