Emerson Deltav Improper Input Validation

2021-08-1000:00:00

www.tenable.com

0.061 Low

EPSS

Percentile

93.5%

JSON

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file.

File data ot_500411.nasl

VendorProductVersionCPE
emersondeltav10.3.1cpe:2.3:a:emerson:deltav:10.3.1:*:*:*:*:*:*:*
emersondeltav11.3.1cpe:2.3:a:emerson:deltav:11.3.1:*:*:*:*:*:*:*
emersondeltav11.3cpe:2.3:a:emerson:deltav:11.3:*:*:*:*:*:*:*
emersondeltav9.3.1cpe:2.3:a:emerson:deltav:9.3.1:*:*:*:*:*:*:*
emersondeltav_proessentials_scientific_graph5.0.0.6cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:*:*:*:*:*:*:*
emersondeltav_workstation10.3.1cpe:2.3:a:emerson:deltav_workstation:10.3.1:*:*:*:*:*:*:*
emersondeltav_workstation11.3.1cpe:2.3:a:emerson:deltav_workstation:11.3.1:*:*:*:*:*:*:*
emersondeltav_workstation11.3cpe:2.3:a:emerson:deltav_workstation:11.3:*:*:*:*:*:*:*
emersondeltav_workstation9.3.1cpe:2.3:a:emerson:deltav_workstation:9.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emerson	deltav	10.3.1	cpe:2.3:a:emerson:deltav:10.3.1:::::::*
emerson	deltav	11.3.1	cpe:2.3:a:emerson:deltav:11.3.1:::::::*
emerson	deltav	11.3	cpe:2.3:a:emerson:deltav:11.3:::::::*
emerson	deltav	9.3.1	cpe:2.3:a:emerson:deltav:9.3.1:::::::*
emerson	deltav_proessentials_scientific_graph	5.0.0.6	cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:::::::*
emerson	deltav_workstation	10.3.1	cpe:2.3:a:emerson:deltav_workstation:10.3.1:::::::*
emerson	deltav_workstation	11.3.1	cpe:2.3:a:emerson:deltav_workstation:11.3.1:::::::*
emerson	deltav_workstation	11.3	cpe:2.3:a:emerson:deltav_workstation:11.3:::::::*
emerson	deltav_workstation	9.3.1	cpe:2.3:a:emerson:deltav_workstation:9.3.1:::::::*