Lucene search

[email protected]CVE-2018-14791

HistoryAug 23, 2018 - 7:29 p.m.

CVE-2018-14791

2018-08-2319:29:00

CWE-269

[email protected]

web.nvd.nist.gov

cve-2018-14791

emerson deltav dcs

non-administrative users

security vulnerability

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products.

Affected configurations

NVD

Node

emersondeltavMatch11.3.1

emersondeltavMatch12.3.1

emersondeltavMatch13.3

emersondeltavMatch13.3.1

emersondeltavMatchr5

CPENameOperatorVersion
emerson:deltavemerson deltaveq11.3.1
emerson:deltavemerson deltaveq12.3.1
emerson:deltavemerson deltaveq13.3
emerson:deltavemerson deltaveq13.3.1
emerson:deltavemerson deltaveqr5

CPE	Name	Operator	Version
emerson:deltav	emerson deltav	eq	11.3.1
emerson:deltav	emerson deltav	eq	12.3.1
emerson:deltav	emerson deltav	eq	13.3
emerson:deltav	emerson deltav	eq	13.3.1
emerson:deltav	emerson deltav	eq	r5

CNA Affected

[
  {
    "product": "DeltaV DCS",
    "vendor": "Emerson",
    "versions": [
      {
        "status": "affected",
        "version": "v11.3.1, v12.3.1, v13.3.0, v13.3.1, R5"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105105

ics-cert.us-cert.gov/advisories/ICSA-18-228-01

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

Related for CVE-2018-14791

cvelist1 nvd1 prion1 nessus2 ics1