Emerson DeltaV
Advisory ansehen veröffentlicht 2021-12-21
Successful exploitation of these vulnerabilities could allow an attacker to achieve local privilege escalation or restart a controller, resulting in a denial-of-service condition.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-44463US | high7.3 | — | ||
Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All ve… | ||||
| CVE-2021-26264US | medium5.5OT erhöht | — | ||
A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- MitigationDeltaV Distributed Control System Controllers and Workstations
DeltaV DCS: Versions 13.3.1, 14.LTS, 14.FP1, 14.FP2, and R6
- MitigationDeltaV Distributed Control System Controllers and Workstations
DeltaV DCS: Versions 13.3.1, 14.LTS, 14.FP1, 14.FP2, and R6
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan