ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-30260

—
CVSS 3.1
7.8 high
EPSS
<1%p4
Published
()
Modified
Description

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

Vendors
emerson
Products
deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware, se4003s2b4 16-pin mass i\/o terminal block firmware, se4003s2b524-pin mass i\/o terminal block firmware, se4017p0 h1 i\/o interface card and terminl block firmware, se4017p1 h1 i\/o card with integrated power firmware, se4019p0 simplex h1 4-port plus fieldbus i\/o interface with terminalblock firmware, se4026 virtual i\/o module 2 firmware, se4027 virtual i\/o module 2 firmware, se4032s1t2b8 high side 40-pin do mass i\/o terminal block firmware, se4037p0 h1 i\/o interface card and terminl block firmware
Weakness
CWE-345
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.