Emerson Deltav Distributed Control System vulnerabilities

3 CVEs affecting Emerson Deltav Distributed Control System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29965, published 2022-07-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29957, published 2022-07-26. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols…
CVE-2021-26264, published 2022-01-28. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition.
CVE-2022-29965, published 2022-07-26. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on…