Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-29966 EUVD-2022-56078GHSA-45hw-93vc-42cp

Emerson Ovation Missing Authentication for Critical Functionality

Published Nov 3, 2026 · Updated Nov 6, 2026 · Assigned by icscert

Description

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.

Affected products

VendorProductAffectedFixed
Emerson Ovation ≤ Version 3.8.0 Feature Pack 1 3.8.0 Feature Pack 3

Advisories 2

References