Lucene search

K
cvelistIcscertCVELIST:CVE-2021-26264
HistoryDec 21, 2021 - 12:00 a.m.

CVE-2021-26264 Emerson DeltaV Missing Authentication for Critical Function

2021-12-2100:00:00
icscert
www.cve.org

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.5%

A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition.

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.5%

Related for CVELIST:CVE-2021-26264