Emerson DeltaV DCS Workstations
Successful exploitation of these vulnerabilities could allow arbitrary code execution, malware injection, or malware to spread to other workstations.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-14797US | high7.8 | — | ||
Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may… | ||||
| CVE-2018-14791US | high7.8 | — | ||
Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products. | ||||
| CVE-2018-14795US | high8.8 | — | ||
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files. | ||||
| CVE-2018-14793US | high8.8 | — | ||
DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution. | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationDeltaV
Software patches are available to users with access to the Guardian Support Portal at https://guardian.emersonprocess.com/. Please refer to the Knowledge Base Article AK-1800- 0042 (DSN18003) for more information.
https://guardian.emersonprocess.com/ - MitigationDeltaV
Vulnerabilities CVE-2018-14797, CVE-2018-14795, and CVE-2018-14791 cannot be exploited if application whitelisting is implemented since it would prevent files from being overwritten.
- MitigationDeltaV
Vulnerabilities CVE-2018-14797, CVE-2018-14795, and CVE-2018-14791 cannot be exploited if application whitelisting is implemented since it would prevent files from being overwritten.
- MitigationDeltaV
Vulnerabilities CVE-2018-14797, CVE-2018-14795, and CVE-2018-14791 cannot be exploited if application whitelisting is implemented since it would prevent files from being overwritten.
- FixedDeltaV
DeltaV DCS Versions: 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5: Apply patch from vendor.
- FixedDeltaV
DeltaV DCS Versions: 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5: Apply patch from vendor.
- FixedDeltaV
DeltaV DCS Versions: 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5: Apply patch from vendor.
- FixedDeltaV
DeltaV DCS Versions: 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5: Apply patch from vendor.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan