Most severe vulnerabilities for "emerson deltav" 10.3.1

Where

AND

Sort:

Emerson DeltaVInput Validation, Buffer Overflow

Risk 52

Severity

7.5

Input Validation, Buffer Overflow

AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via an invalid field in a project file.

First published (updated )

CVE-2012-1817

Emerson DeltaVSQL Injection

Risk 52

Severity

7.5

SQL Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

First published (updated )

CVE-2012-1815

Emerson DeltaVEmerson DeltaV Use of Hard-coded Credentials

Risk 52

Severity

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.

Remedy

Emerson has created a patch to mitigate these vulnerabilities. Emerson has distributed a notification (KBA NK-1400-0031) that provides details of the vulnerabilities, recommended mitigations, and instructions on obtaining and installing the patch. This document is available on Emerson’s support site to users who have support contracts with Emerson. If you do not have access to this site and need to apply the patch, please contact customer service at 1‑800‑833‑8314.

First published (updated )

CVE-2014-2350

Emerson DeltaVAn unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11…

Risk 40

Severity

6.4

AV:N/AC:L/Au:N/C:N/I:P/A:P

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.

First published (updated )

CVE-2012-1818

Emerson DeltaVEmerson DeltaV Use of Improper Authorization

Risk 44

Severity

6.2

AV:L/AC:L/Au:N/C:P/I:P/A:P

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges.

1 / 2

Remedy

First published (updated )

CVE-2014-2349

Emerson DeltaVBuffer Overflow

Risk 26

Severity

Buffer Overflow

AV:N/AC:L/Au:N/C:N/I:N/A:P

PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (1) TCP or (2) UDP packet to port 111.

First published (updated )

CVE-2012-1816

Emerson DeltaVBuffer Overflow

Risk 26

Severity

Buffer Overflow

AV:N/AC:L/Au:N/C:N/I:N/A:P

Buffer overflow in Emerson DeltaV 9.3.1 and 10.3 through 11.3.1 allows remote attackers to cause a denial of service (daemon crash) via a long string to an unspecified port.

First published (updated )

CVE-2012-3035

Emerson DeltaVXSS

Risk 22

Severity

4.3

XSS

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

First published (updated )

CVE-2012-1814

Trending

Emerson DeltaVInput Validation, Buffer Overflow

Emerson DeltaVSQL Injection

Emerson DeltaVEmerson DeltaV Use of Hard-coded Credentials

Remedy

Emerson DeltaVAn unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11…

Emerson DeltaVEmerson DeltaV Use of Improper Authorization

Remedy

Emerson DeltaVBuffer Overflow

Emerson DeltaVBuffer Overflow

Emerson DeltaVXSS

Company

Resources

Contact