Vulnerabilities

TI-2021-08112 CVE-2021-26264 · GHSA-x46h-6fmr-m5fr

Emerson DeltaV Missing Authentication for Critical Function

LOW 26

A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition.

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00187 Published 2022-01-28 No fix listed CWE-306

TI-2012-01603 CVE-2012-1818 · GHSA-72mh-j9vc-72v6

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1…

LOW 32

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01865 Published 2012-06-08 No fix listed CWE-264

TI-2012-01602 CVE-2012-1817 · GHSA-5xj2-wj79-c4pm

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1…

MEDIUM 40

Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary code or cause a denia…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03926 Published 2012-06-08 No fix listed CWE-20

TI-2012-01601 CVE-2012-1816 · GHSA-v2vr-76ch-w5qv

PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1…

LOW 27

PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon crash) via a crafted (…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01917 Published 2012-06-08 No fix listed CWE-119

TI-2012-01600 CVE-2012-1815 · GHSA-q78w-x5mf-73m6

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1…

LOW 36

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspec…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01494 Published 2012-06-08 No fix listed CWE-89

TI-2012-01599 CVE-2012-1814 · GHSA-vg7w-cg24-5ch6

Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1…

LOW 23

Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01318 Published 2012-06-08 No fix listed CWE-79