CVE-2022-30267: Emerson Ovation Insufficient Verification of Data Authenticity
Published Nov 3, 2026
·Updated
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
Event History
Nov 3, 2026
CVE Published
via MITRE·11:03 PM
Data Sourced
via MITRE·11:03 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does the available information indicate about exploitation prerequisites?
The CVSS vector indicates the issue is remotely reachable over a network, has low attack complexity, and requires neither prior privileges nor user interaction.