CVE-2022-29966: Emerson Ovation Missing Authentication for Critical Functionality
Published Nov 3, 2026
·Updated
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
Event History
Nov 3, 2026
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is remotely exploitable over the network and does not require prior privileges or user interaction. An attacker able to reach the affected Emerson Ovation protocols could potentially exploit the lack of authentication.
2
What could an attacker do if exploitation succeeds?
An attacker could change controller configuration or cause a denial-of-service condition. The reported impact includes high confidentiality, integrity, and availability effects.