Read the docs
TI-2022-26715 Aliases CVE-2022-29966GHSA-45hw-93vc-42cp

Missing authentication in Emerson Ovation controller protocols

Priority MEDIUM 48CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

Emerson Ovation through Version 3.8.0 Feature Pack 1 has several protocols that have no authentication. The flaw is missing authentication for critical functionality (CWE-306). An unauthenticated remote attacker can change controller configuration or cause a denial-of-service condition.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00393 33rd percentileScored 2026-11-07
Fix Fixed Ovation (Emerson): 3.8.0 Feature Pack 3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EmersonOvationup to Version 3.8.0 Feature Pack 13.8.0 Feature Pack 3Patch availableCNA
  • Ovation VendorEmerson Affected up to Version 3.8.0 Feature Pack 1 Fixed in 3.8.0 Feature Pack 3 Patch available CNA

Remediation

Emerson Ovation is fixed in 3.8.0 Feature Pack 3. Upgrade to that version.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA Ovation (Emerson) Fixed in 3.8.0 Feature Pack 3

Timeline

  1. 2026-11-03 Threatist record created from CVE-2022-29966
  2. 2026-11-04 Alias added: GHSA-45hw-93vc-42cp
  3. 2026-11-06 CISA SSVC decision points changed

References

Other 2

  • TI-2022-26383 Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path CVSS 4.0HIGH 8.5
  • TI-2021-20526 Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file… CVSS 3.1CRITICAL 9.8
  • TI-2021-20521 Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in… CVSS 3.1CRITICAL 9.8
  • TI-2020-08552 ICSA-20-140-02 Emerson OpenEnterprise CVSS 3.1CRITICAL 10.0
  • TI-2013-02455 Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with… CVSS 2.0HIGH 10.0
  • TI-2013-00581 The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50… CVSS 2.0HIGH 10.0
See all 92 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences