CVE-2014-2350

Technical details for CVE-2014-2350 are not publicly available in the provided documents; monitor for updates.

CVE-2018-14795

DeltaV DCS Workstations (Emerson) are affected by CVE-2018-14795 due to improper path validation (Relative Path Traversal). Affected products are DeltaV versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5. The vulnerability can allow an attacker to replace executable files. Public advisories/records ...

CVE-2018-14791

CVE-2018-14791 affects Emerson DeltaV DCS: versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5. The root cause is improper privilege management that lets non-administrative users modify executable and library files. Impact is described as changes to executables/libraries with potential partial confid...

CVE-2018-14793

CVE-2018-14793 affects Emerson DeltaV DCS Workstations (DeltaV v11.3.1, v12.3.1, v13.3.0, v13.3.1, and R5). Root cause: stack-based buffer overflow via an open communication port, enabling arbitrary code execution. Impact: remote code execution with high severity; ICSA-18-228-01 notes exploitable...

CVE-2012-1816

CVE-2012-1816 affects Emerson DeltaV and DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The issue is described as an implicit memory-bounds vulnerability in PORTSERV.exe that allows remote attackers to cause a denial of service (daemon cra...

CVE-2014-2349

CVE-2014-2349 affects Emerson DeltaV versions 10.3.1, 11.3, 11.3.1, and 12.3. Local attacker with engineering-level privileges can read/modify DeltaV configuration files via hard-coded credentials in diagnostic services (through a TCP session). ICS-CERT notes a patch mitigates these vulnerabiliti...

CVE-2012-1814

Emerson DeltaV family is affected by CVE-2012-1814: XSS in DeltaV and DeltaV Workstations versions 9.3.1, 10.3.1, 11.3, 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability allows remote script injection via unspecified web vectors in the affected web interfaces. Exploitati...

CVE-2021-44463

CVE-2021-44463 affects Emerson DeltaV Distributed Control System Controllers and Workstations (all versions). The vulnerability is an Uncontrolled Search Path Element caused by missing DLLs, which, if replaced by an insider, could enable local privilege escalation when certain DeltaV services sta...

CVE-2012-1815

CVE-2012-1815 affects Emerson DeltaV DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability is described as a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lis...

CVE-2018-14797

CVE-2018-14797 affects Emerson DeltaV DCS: DeltaV versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 are vulnerable to an Uncontrolled Search Path Element (CWE-427) that can allow a specially crafted DLL in the search path to be loaded as an internal DLL, potentially enabling arbitrary code executio...

CVE-2018-19021

CVE-2018-19021 is an authentication bypass vulnerability in Emerson DeltaV DCS maintenance port affecting DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior. The issue allows a specially crafted script to bypass authentication and could lead to a denial of service. The a...

CVE-2012-1817

CVE-2012-1817 affects Emerson DeltaV/DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. Root cause: buffer overflow from invalid fields in a project file, enabling user-assisted remote code execution or denial of service (daemon crash). Exploi...

CVE-2012-1818

The CVE-2012-1818 issue affects Emerson DeltaV and DeltaV Workstations (versions 9.3.1, 10.3.1, 11.3, 11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. An unspecified ActiveX control may allow remote attackers to overwrite arbitrary files via unknown vectors. Public sources describe this...

CVE-2016-9345

DeltaV Easy Security Management in Emerson DeltaV V12.3, V12.3.1, and V13.3 is affected by CVE-2016-9345 due to improper privilege management, enabling a local attacker to elevate privileges within the DeltaV control system. Exploitation is local with no remote vector; user interaction may be req...

CVE-2012-3035

CVE-2012-3035 concerns a buffer overflow in the Emerson DeltaV application. Affects DeltaV versions 9.3.1, 10.3 through 11.3.1. The vulnerability allows a remote attacker to cause a denial of service (daemon crash) by sending a long string to an unspecified port. The NVD/CVE data lists a CVSS v2 ...