CVE-2012-1818

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

CVE-2012-1817

CVE-2012-1817 affects Emerson DeltaV/DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. Root cause: buffer overflow from invalid fields in a project file, enabling user-assisted remote code execution or denial of service (daemon crash). Exploi...

CVE-2012-1815

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1816

CVE-2012-1816 affects Emerson DeltaV and DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The issue is described as an implicit memory-bounds vulnerability in PORTSERV.exe that allows remote attackers to cause a denial of service (daemon cra...

CVE-2012-1814

Emerson DeltaV family is affected by CVE-2012-1814: XSS in DeltaV and DeltaV Workstations versions 9.3.1, 10.3.1, 11.3, 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability allows remote script injection via unspecified web vectors in the affected web interfaces. Exploitati...

CVE-2012-1814

Cross-site scripting XSS vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1818: Undefined Security Weakness

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

PT-2012-3566

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description The issue allows remote attackers to overwrite arbitrary files via unknown...

PT-2012-3565

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 Emerson DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description The issue allows user-assisted remote attackers to execute arbitra...

PT-2012-3562

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitra...

CVE-2012-1817: Improper Input Validation

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service daemon crash via an invalid field in a project file...

CVE-2012-1816: Improper Restriction of Operations within the Bounds of a Memory Buffer

PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service daemon crash via a crafted 1 TCP or 2 UDP packet to port 111...

PT-2012-3563

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 Emerson DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description The issue allows remote attackers to execute arbitrary SQL command...

CVE-2012-1814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3564

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1, 10.3.1, 11.3, and 11.3.1 Emerson DeltaV Workstations versions 9.3.1, 10.3.1, 11.3, and 11.3.1 DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description The issue allows remote attackers to cause a denial ...

CVE-2012-1815: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Emerson DeltaV Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory ICSA-12-138-01P to the US-CERT secure portal on May 17, 2012, and released Update A on May 21, 2012. This web page release including Update A was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the Securi...