Description
Emerson Ovation
was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson | Ovation | ≤ Version 3.8.0 Feature Pack 1 | 3.8.0 Feature Pack 3 |
Advisories 2
- WID-SEC-2026-4313 Emerson Ovation: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2026
- ICSA-24-158-02 Emerson Ovation CISA ICS & IT advisories · Jun 6, 2024