Skip to content
OpenAdvisories
Critical ICSA-18-228-01 4 CVEs

Emerson DeltaV DCS Workstations

Published Aug 16, 2018 · Updated Aug 16, 2018

Vendor: Emerson Product: DeltaV

Summary

Successful exploitation of these vulnerabilities could allow arbitrary code execution, malware injection, or malware to spread to other workstations.

Vulnerabilities 4

  • Unscored —
    CVE-2018-14791

    Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable …

    Emerson DeltaV DCS
  • Unscored —
    CVE-2018-14793

    DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open commu…

    ICS-CERT DeltaV
  • Unscored —
    CVE-2018-14795

    DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an…

    ICS-CERT DeltaV
  • Unscored —
    CVE-2018-14797

    Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the s…

    Emerson DeltaV DCS

Revision history

  1. #1

    ICSA-18-228-01 Emerson DeltaV DCS Workstations

References