CVE-2021-44463: Emerson DeltaV Uncontrolled Search Path Element
First published: Fri Jan 28 2022(Updated: )
Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Emerson DeltaV | =13.3.1 | |
| Emerson DeltaV | =14-feature_pack1 | |
| Emerson DeltaV | =14-feature_pack2 | |
| Emerson DeltaV | =14.3.1 | |
| Emerson DeltaV | =r6 | |
| Emerson DeltaV Distributed Control System Controllers and Workstations |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2021-44463.
What is the severity of CVE-2021-44463?
The severity of CVE-2021-44463 is high with a severity value of 7.3.
Which software versions are affected by CVE-2021-44463?
CVE-2021-44463 affects all versions of the DeltaV Distributed Control System Controllers and Workstations, including versions 13.3.1, 14-feature_pack1, 14-feature_pack2, 14.3.1, and r6.
How can an attacker exploit this vulnerability?
An attacker can exploit CVE-2021-44463 by replacing missing DLLs, which can allow them to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations.
Is there a fix available for CVE-2021-44463?
As of now, there is no specific fix available for CVE-2021-44463. It is recommended to follow the guidance provided by the vendor and apply any updates or patches as they become available.
- collector/nvd-index
- agent/type
- agent/weakness
- agent/author
- agent/references
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/title
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- vendor/emerson
- canonical/emerson deltav
- version/emerson deltav/13.3.1
- version/emerson deltav/14-feature_pack1
- version/emerson deltav/14-feature_pack2
- version/emerson deltav/14.3.1
- version/emerson deltav/r6
- canonical/emerson deltav distributed control system controllers and workstations