DE
Product
Deltav
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 2Low 0
Watch
Add Deltav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14795 | 8.8 | Aug 21 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files Affected: 11.3.1; 12.3.1; 13.3.0; 13.3.1; r5 |
| CVE-2018-14793 | 8.8 | Aug 21 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution Affected: 11.3.1; 12.3.1; 13.3.0; 13.3.1; r5 |
| CVE-2018-14797 | 7.8 | Aug 23 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which… Affected: 11.3.1; 12.3.1; 13.3.0; 13.3.1; r5 |
| CVE-2018-14791 | 7.8 | Aug 23 | Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products Affected: 11.3.1; 12.3.1; 13.3; 13.3.1; r5 |
| CVE-2021-44463 | 7.3 | Jan 28 | Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All… Affected: 13.3.1; 14; 14; 14.3.1; r6 |
| CVE-2016-9345 | 6.8 | Feb 13 | An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3 Affected: 12.3; 12.3.1; 13.3 |
| CVE-2018-19021 | 6.5 | Jan 25 | A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may… Affected: r5.1 through r6; 11.3.1; 11.3.2; 12.3.1; 13.3.1; 14.3 |
| CVE-2014-2350 | – | May 22 | Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP… Affected: 10.3.1; 11.3; 11.3.1; 12.3 |
| CVE-2014-2349 | – | May 22 | Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP… Affected: 10.3.1; 11.3; 11.3.1; 12.3 |
| CVE-2012-3035 | – | Oct 1 | Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
| CVE-2012-1818 | – | Jun 8 | An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers… Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
| CVE-2012-1817 | – | Jun 8 | Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers… Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
| CVE-2012-1816 | – | Jun 8 | PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial… Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
| CVE-2012-1815 | – | Jun 8 | SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to… Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
| CVE-2012-1814 | – | Jun 8 | Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote… Affected: 9.3.1; 10.3.1; 11.3; 11.3.1 |
Showing 15