EUVD-2012-1824

Malware in sbrugna...

CVE-2021-44463

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations All versions when some DeltaV services are started...

CVE-2018-11691: Use of Hard-coded Credentials

Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches’ management password upon commissioning. Emerson released patches for DeltaV workstations to address this issue, and the patches can be downloaded from...

Buffer overflow

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service daemon crash via an invalid field in a project file...

CVE-2012-1816

CVE-2012-1816 affects Emerson DeltaV and DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The issue is described as an implicit memory-bounds vulnerability in PORTSERV.exe that allows remote attackers to cause a denial of service (daemon cra...

CVE-2012-1815

CVE-2012-1815 affects Emerson DeltaV DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability is described as a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lis...

CVE-2012-1817

CVE-2012-1817 affects Emerson DeltaV/DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. Root cause: buffer overflow from invalid fields in a project file, enabling user-assisted remote code execution or denial of service (daemon crash). Exploi...

CVE-2012-1818

The CVE-2012-1818 issue affects Emerson DeltaV and DeltaV Workstations (versions 9.3.1, 10.3.1, 11.3, 11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. An unspecified ActiveX control may allow remote attackers to overwrite arbitrary files via unknown vectors. Public sources describe this...

CVE-2012-1817: Improper Input Validation

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service daemon crash via an invalid field in a project file...

CVE-2012-1814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1818: Undefined Security Weakness

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

Emerson DeltaV Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory ICSA-12-138-01P to the US-CERT secure portal on May 17, 2012, and released Update A on May 21, 2012. This web page release including Update A was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the Securi...