CVE-2014-2349: Emerson DeltaV Use of Improper Authorization

Published May 22, 2014

Updated

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges.

Other sources

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.

— MITRE

Affected Software

4 affected components

Emerson DeltaV=10.3.1

Emerson DeltaV=11.3

Emerson DeltaV=11.3.1

Emerson DeltaV=12.3

Remediation

Information

Emerson has created a patch to mitigate these vulnerabilities. Emerson has distributed a notification (KBA NK-1400-0031) that provides details of the vulnerabilities, recommended mitigations, and instructions on obtaining and installing the patch. This document is available on Emerson’s support site to users who have support contracts with Emerson. If you do not have access to this site and need to apply the patch, please contact customer service at 1‑800‑833‑8314.

Event History

May 22, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:55 PM

DescriptionSeverityWeaknessAffected Software

Jan 11, 57804

Event

via MITRE·08:28 PM

Frequently Asked Questions

What is the severity of CVE-2014-2349?

The severity of CVE-2014-2349 is considered high due to the potential for unauthorized access to sensitive configuration files.

How do I fix CVE-2014-2349?

To mitigate CVE-2014-2349, ensure that access controls are properly enforced to restrict engineering-level privileges.

What versions of Emerson DeltaV are affected by CVE-2014-2349?

CVE-2014-2349 affects Emerson DeltaV versions 10.3.1, 11.3, 11.3.1, and 12.3.

Can remote attackers exploit CVE-2014-2349?

CVE-2014-2349 requires local access, so remote attackers cannot directly exploit this vulnerability.

What is the impact of exploiting CVE-2014-2349?

Exploiting CVE-2014-2349 could allow local users to modify or read sensitive configuration files, potentially leading to system misconfigurations.