Input validation

2018-08-2114:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files.

CPENameOperatorVersion
deltaveq12.3.1
deltaveq11.3.1
deltaveq13.3.0
deltaveq13.3.1
deltaveq5.0.114

Name	Operator	Version
deltav	eq	12.3.1
deltav	eq	11.3.1
deltav	eq	13.3.0
deltav	eq	13.3.1
deltav	eq	5.0.114

References

www.securityfocus.com/bid/105105

ics-cert.us-cert.gov/advisories/ICSA-18-228-01