PT-2012-3566 · Emerson · Emerson Deltav Workstations+2

Published 2012-06-08 · Updated 2012-10-13 · CVE-2012-1818

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 DeltaV ProEssentials Scientific Graph version 5.0.0.6

Description The issue allows remote attackers to overwrite arbitrary files via unknown vectors due to an unspecified ActiveX control.

Recommendations For Emerson DeltaV versions 9.3.1 through 11.3.1, update to a version that addresses the issue. For Emerson DeltaV Workstations versions 9.3.1 through 11.3.1, update to a version that addresses the issue. For DeltaV ProEssentials Scientific Graph version 5.0.0.6, update to a version that addresses the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1818

Affected Products

Deltav Proessentials Scientific Graph

Emerson Deltav

Emerson Deltav Workstations

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2012-1818 · Security Note
• http://secunia.com/advisories/49210 · Note
• http://osvdb.org/82014 · Note
• http://securityfocus.com/bid/53591 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf · Note