Login Request a demo
EM
Vendor
Emerson
93 products with CVEs on record
304
CVEs
0
On KEV
0
New 30D
Products
DE
Deltav
Emerson
8.8
15 CVEs0 on KEV0 new
W1
Wireless 1420 Gateway Firmware
Emerson
10.0
8 CVEs0 on KEV0 new
W1
Wireless 1410 Gateway Firmware
Emerson
10.0
7 CVEs0 on KEV0 new
XE
X-stream Enhanced Xefd Firmware
Emerson
9.8
7 CVEs0 on KEV0 new
XE
X-stream Enhanced Xegk Firmware
Emerson
9.8
7 CVEs0 on KEV0 new
XE
X-stream Enhanced Xegp Firmware
Emerson
9.8
7 CVEs0 on KEV0 new
XE
X-stream Enhanced Xexf Firmware
Emerson
9.8
7 CVEs0 on KEV0 new
DW
Deltav Workstation
Emerson
5.5
6 CVEs0 on KEV0 new
SR
Se4801t0x Redundant Wireless I/o Card Firmware
Emerson
7.8
6 CVEs0 on KEV0 new
W1
Wireless 1410d Gateway Firmware
Emerson
8.8
6 CVEs0 on KEV0 new
DD
Deltav Distributed Control System SQ Controller Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
DD
Deltav Distributed Control System SX Controller Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
DP
Deltav Proessentials Scientific Graph
Emerson
–
5 CVEs0 on KEV0 new
D8
DL 8000 Remote Terminal Unit
Emerson
–
5 CVEs0 on KEV0 new
EP
Electric's Proficy
Emerson
7.8
5 CVEs0 on KEV0 new
OS
Openenterprise Scada Server
Emerson
9.8
5 CVEs0 on KEV0 new
R8
Roc 800 Remote Terminal Unit
Emerson
–
5 CVEs0 on KEV0 new
R8
Roc 800l Remote Terminal Unit
Emerson
–
5 CVEs0 on KEV0 new
SH
Se4002s1t2b6 High Side 40-pin Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
S1
Se4003s2b4 16-pin Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SM
Se4003s2b524-pin Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4017p0 H1 I/o Interface Card And Terminl Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4017p1 H1 I/o Card With Integrated Power Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SS
Se4019p0 Simplex H1 4-port Plus Fieldbus I/o Interface With Terminalblock Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SV
Se4026 Virtual I/o Module 2 Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SV
Se4027 Virtual I/o Module 2 Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4032s1t2b8 High Side 40-pin DO Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4037p0 H1 I/o Interface Card And Terminl Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SR
Se4037p1 Redundant H1 I/o Card With Integrated Power And Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SR
Se4039p0 Redundant H1 4-port Plus Fieldbus I/o Interface With Terminalblock Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4052s1t2b6 High Side 40-pin Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SH
Se4082s1t2b8 High Side 40-pin DO Mass I/o Terminal Block Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SS
Se4100 Simplex Ethernet I/o Card (eioc) Assembly Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
SS
Se4101 Simplex Ethernet I/o Card (eioc) Assembly Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
VM
Ve4103 Modbus Tcp Interface For Ethernet Connected I/o (eioc) Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
VE
Ve4104 Ethernet/ip Control Tag Integration For Ethernet Connected I/o (eioc) Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
VE
Ve4105 Ethernet/ip Interface For Ethernet Connected I/o (eioc) Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
VO
Ve4106 Opc-ua Client For Ethernet Connected I/o (eioc) Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
VI
Ve4107 Iec 61850 Mms Interface For Ethernet Connected I/o (eioc) Firmware
Emerson
7.8
5 CVEs0 on KEV0 new
GF
Gc1500xa Firmware
Emerson
9.8
4 CVEs0 on KEV0 new
GF
Gc370xa Firmware
Emerson
9.8
4 CVEs0 on KEV0 new
GF
Gc700xa Firmware
Emerson
9.8
4 CVEs0 on KEV0 new
AD
Ams Device Manager
Emerson
9.8
3 CVEs0 on KEV0 new
DD
Deltav Distributed Control System
Emerson
7.8
3 CVEs0 on KEV0 new
CM
Controlwave Micro Firmware
Emerson
7.8
2 CVEs0 on KEV0 new
DR
Data Record AD
Emerson
7.8
2 CVEs0 on KEV0 new
DX
Dixell Xweb-500 Firmware
Emerson
9.8
2 CVEs0 on KEV0 new
DF
Dl8000 Firmware
Emerson
9.8
2 CVEs0 on KEV0 new
FL
Flexlogger
Emerson
7.8
2 CVEs0 on KEV0 new
GW
G Web Development Software
Emerson
7.8
2 CVEs0 on KEV0 new
LN
Labview Nxg
Emerson
7.8
2 CVEs0 on KEV0 new
OP
Openbsi
Emerson
5.5
2 CVEs0 on KEV0 new
OO
Ovation Ocr400 Firmware
Emerson
8.8
2 CVEs0 on KEV0 new
PM
Proficy Machine Edition
Emerson
5.3
2 CVEs0 on KEV0 new
RF
Roc809 Firmware
Emerson
9.8
2 CVEs0 on KEV0 new
RF
Roc827 Firmware
Emerson
9.8
2 CVEs0 on KEV0 new
SC
Specification Compliance Manager
Emerson
7.8
2 CVEs0 on KEV0 new
ST
Static Test Software Suite
Emerson
7.8
2 CVEs0 on KEV0 new
SS
Sts Software Bundle
Emerson
7.8
2 CVEs0 on KEV0 new
SS
Systemlink Server
Emerson
7.8
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-50930
EP
Emerson PAC Machine Edition
Emerson
8.4
0%
Jan 13Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path
CVE-2024-1156
DR
Data Record AD
Emerson
7.8
0%
Feb 20Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable…
CVE-2024-1155
DR
Data Record AD
Emerson
7.8
0%
Feb 20Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via…
CVE-2023-51761
GF
Gc370xa Firmware
Emerson
8.1
1%
Feb 9In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities
CVE-2023-49716
GF
Gc370xa Firmware
Emerson
9.8
1%
Feb 9In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer
CVE-2023-46687
GF
Gc370xa Firmware
Emerson
9.8
1%
Feb 9In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer
CVE-2023-43609
GF
Gc370xa Firmware
Emerson
9.1
0%
Feb 9In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service…
CVE-2023-1935
RF
Roc809 Firmware
Emerson
9.4
1%
Aug 2ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a…
CVE-2022-30260
DD
Deltav Distributed Control System SQ Controller Firmware
Emerson
7.8
0%
Dec 26Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature)
CVE-2022-2791
PR
Proficy
Emerson
7.8
0%
Nov 22Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into…
CVE-2022-2793
EP
Electric's Proficy
Emerson
7.8
0%
Aug 19Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data…
CVE-2022-2792
EP
Electric's Proficy
Emerson
7.5
0%
Aug 19Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access…
CVE-2022-2790
EP
Electric's Proficy
Emerson
5.9
0%
Aug 19Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled…
CVE-2022-2789
EP
Electric's Proficy
Emerson
5.5
0%
Aug 19Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different…
CVE-2022-2788
EP
Electric's Proficy
Emerson
7.3
0%
Aug 19Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload…
CVE-2022-30262
CP
Controlwave Pac Firmware
Emerson
7.8
0%
Aug 17The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity
CVE-2022-30264
DF
Dl8000 Firmware
Emerson
9.8
1%
Aug 16The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations
CVE-2022-29959
OP
Openbsi
Emerson
5.5
0%
Aug 16Emerson OpenBSI through 2022-04-29 mishandles credential storage
CVE-2022-29965
DD
Deltav Distributed Control System
Emerson
5.5
0%
Jul 26The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords
CVE-2022-29964
DD
Deltav Distributed Control System SQ Controller Firmware
Emerson
5.5
0%
Jul 26The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords
CVE-2022-29963
DD
Deltav Distributed Control System SQ Controller Firmware
Emerson
5.5
0%
Jul 26The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords
CVE-2022-29962
SS
Se4101 Simplex Ethernet I/o Card (eioc) Assembly Firmware
Emerson
5.5
0%
Jul 26The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords
CVE-2022-29960
OP
Openbsi
Emerson
5.5
0%
Jul 26Emerson OpenBSI through 2022-04-29 uses weak cryptography
CVE-2022-29957
DD
Deltav Distributed Control System
Emerson
7.8
0%
Jul 26The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication
CVE-2020-16235
OS
Openenterprise Scada Server
Emerson
6.5
0%
May 19Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained
CVE-2020-10640
OS
Openenterprise Scada Server
Emerson
9.8
3%
Feb 24Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific…
CVE-2020-10636
OS
Openenterprise Scada Server
Emerson
7.5
0%
Feb 24Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained
CVE-2020-10632
OS
Openenterprise Scada Server
Emerson
5.3
0%
Feb 24Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to…
CVE-2021-45421
DX
Dixell Xweb-500 Firmware
Emerson
7.5
1%
Feb 14Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing
CVE-2021-45420
DX
Dixell Xweb-500 Firmware
Emerson
9.8
18%
Feb 14Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi
CVE-2021-44463
DE
Deltav
Emerson
7.3
0%
Jan 28Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All…
CVE-2021-26264
DW
Deltav Workstation
Emerson
5.5
0%
Jan 28A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition
CVE-2021-45427
XE
Xweb300d Evo Firmware
Emerson
9.8
19%
Dec 30Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal
CVE-2021-42542
W1
Wireless 1410 Gateway Firmware
Emerson
8.8
1%
Oct 22The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure
CVE-2021-42540
W1
Wireless 1410 Gateway Firmware
Emerson
8.8
1%
Oct 22The affected product is vulnerable to a unsanitized extract folder for system configuration
CVE-2021-42539
W1
Wireless 1410 Gateway Firmware
Emerson
8.8
1%
Oct 22The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change
CVE-2021-42538
W1
Wireless 1410 Gateway Firmware
Emerson
8.8
1%
Oct 22The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input
CVE-2021-42536
W1
Wireless 1410 Gateway Firmware
Emerson
6.5
1%
Oct 22The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables
CVE-2021-38485
W1
Wireless 1410 Gateway Firmware
Emerson
8.8
1%
Oct 22The affected product is vulnerable to improper input validation in the restore file
CVE-2020-12030
W1
Wireless 1410 Gateway Firmware
Emerson
10.0
1%
Sep 29There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled
CVE-2021-29298
PM
Proficy Machine Edition
Emerson
5.3
1%
Jul 30Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a…
CVE-2021-29297
PM
Proficy Machine Edition
Emerson
5.3
1%
Jul 30Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a…
CVE-2021-27467
XE
X-stream Enhanced Xegp Firmware
Emerson
6.1
1%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2021-27465
XE
X-stream Enhanced Xegp Firmware
Emerson
6.1
1%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2021-27463
XE
X-stream Enhanced Xegp Firmware
Emerson
5.3
1%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2021-27461
XE
X-stream Enhanced Xegp Firmware
Emerson
7.5
1%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2021-27459
XE
X-stream Enhanced Xegp Firmware
Emerson
9.8
2%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2021-27457
XE
X-stream Enhanced Xegp Firmware
Emerson
7.5
0%
May 20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer
CVE-2020-19419
SW
Smart Wireless Gateway 1420 Firmware
Emerson
7.5
3%
Mar 10Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without…
CVE-2020-19417
W1
Wireless 1420 Gateway Firmware
Emerson
8.8
3%
Mar 10Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP…
CVE-2020-12525
RT
Rosemount Transmitter Interface Software
Emerson
7.8
1%
Jan 22M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage
CVE-2020-27254
XE
X-stream Enhanced Xegp Firmware
Emerson
7.5
1%
Dec 21Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log…
CVE-2020-6971
VA
Valvelink
Emerson
7.8
0%
Mar 5In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure…
CVE-2020-6970
OS
Openenterprise Scada Server
Emerson
9.8
3%
Feb 19A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of…
CVE-2019-13524
RC
Rx3i Cpe330 Firmware
Emerson
7.5
2%
Jan 16GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending…
CVE-2019-10967
OO
Ovation Ocr400 Firmware
Emerson
8.8
4%
May 28In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long…
CVE-2019-10965
OO
Ovation Ocr400 Firmware
Emerson
8.8
4%
May 28In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long…
CVE-2019-12167
LC
Liebert Challenger Firmware
Emerson
6.1
1%
May 22httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter
CVE-2018-11691
VF
Ve6046 Firmware
Emerson
9.8
2%
May 14Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches’ management password upon…
CVE-2018-19021
ED
Emerson DeltaV
Emerson
6.5
1%
Jan 25A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may…