Emerson Controlwave Micro Firmware vulnerabilities

2 CVEs affecting Emerson Controlwave Micro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-30262, published 2022-08-17.

More from Emerson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5452, published 2018-03-07. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and…
• CVE-2022-30262, published 2022-08-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB…