CVE-2022-29962
—CVSS 3.1
5.5 medium
EPSS
<1%p14
Published
()
Modified
Description
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.
- Vendors
- emerson
- Products
- deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware, se4003s2b4 16-pin mass i\/o terminal block firmware, se4003s2b524-pin mass i\/o terminal block firmware, se4017p0 h1 i\/o interface card and terminl block firmware, se4017p1 h1 i\/o card with integrated power firmware, se4019p0 simplex h1 4-port plus fieldbus i\/o interface with terminalblock firmware, se4026 virtual i\/o module 2 firmware, se4027 virtual i\/o module 2 firmware, se4032s1t2b8 high side 40-pin do mass i\/o terminal block firmware, se4037p0 h1 i\/o interface card and terminl block firmware
- Weakness
- CWE-798
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.