Emerson DeltaV
view advisory published 2021-12-21
Successful exploitation of these vulnerabilities could allow an attacker to achieve local privilege escalation or restart a controller, resulting in a denial-of-service condition.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44463US | high7.3 | — | ||
Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All ve… | ||||
| CVE-2021-26264US | medium5.5OT elevated | — | ||
A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationDeltaV Distributed Control System Controllers and Workstations
DeltaV DCS: Versions 13.3.1, 14.LTS, 14.FP1, 14.FP2, and R6
- MitigationDeltaV Distributed Control System Controllers and Workstations
DeltaV DCS: Versions 13.3.1, 14.LTS, 14.FP1, 14.FP2, and R6
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan