Description
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson | DeltaV | 10.3.1, 11.3, 11.3.1, 12.3 | — |
Advisories 1
- ICSA-14-133-02 Emerson DeltaV Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025