CVE-2022-29965: Emerson Deltav Distributed Control System

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350.

Affected products

• Emerson Deltav Distributed Control System: up to and including 2022-04-29
• Emerson Deltav Distributed Control System Sq Controller Firmware: up to and including 2022-04-29
• Emerson Deltav Distributed Control System Sx Controller Firmware: up to and including 2022-04-29
• Emerson SE4002S1T2B6 High Side 40-Pin Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4003S2B4 16-Pin Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4003S2B524-Pin Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4017P0 h1 I/o Interface Card And Terminl Block Firmware: up to and including 2022-04-29
• Emerson SE4017P1 h1 I/o Card With Integrated Power Firmware: up to and including 2022-04-29
• Emerson SE4019P0 Simplex h1 4-Port Plus Fieldbus I/o Interface With Terminalblock Firmware: up to and including 2022-04-29
• Emerson SE4026 Virtual I/o Module 2 Firmware: up to and including 2022-04-29
• Emerson SE4027 Virtual I/o Module 2 Firmware: up to and including 2022-04-29
• Emerson SE4032S1T2B8 High Side 40-Pin Do Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4037P0 h1 I/o Interface Card And Terminl Block Firmware: up to and including 2022-04-29
• Emerson SE4037P1 Redundant h1 I/o Card With Integrated Power And Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4039P0 Redundant h1 4-Port Plus Fieldbus I/o Interface With Terminalblock Firmware: up to and including 2022-04-29
• Emerson SE4052S1T2B6 High Side 40-Pin Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4082S1T2B8 High Side 40-Pin Do Mass I/o Terminal Block Firmware: up to and including 2022-04-29
• Emerson SE4100 Simplex Ethernet I/o Card (eioc) Assembly Firmware: up to and including 2022-04-29
• Emerson SE4101 Simplex Ethernet I/o Card (eioc) Assembly Firmware: up to and including 2022-04-29
• Emerson SE4801T0X Redundant Wireless I/o Card Firmware: up to and including 2022-04-29
• Emerson VE4103 Modbus TCP Interface For Ethernet Connected I/o (eioc) Firmware: up to and including 2022-04-29
• Emerson VE4104 Ethernet/ip Control Tag Integration For Ethernet Connected I/o (eioc) Firmware: up to and including 2022-04-29
• Emerson VE4105 Ethernet/ip Interface For Ethernet Connected I/o (eioc) Firmware: up to and including 2022-04-29
• Emerson VE4106 Opc-Ua Client For Ethernet Connected I/o (eioc) Firmware: up to and including 2022-04-29
• Emerson VE4107 Iec 61850 Mms Interface For Ethernet Connected I/o (eioc) Firmware: up to and including 2022-04-29

Published 2022-07-26. Last modified 2026-06-17.