PT-2013-1702 · Emerson · Deltav Se3006+1

Published 2013-03-11 · Updated 2013-03-18 · CVE-2012-4703

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Emerson DeltaV SE3006 versions 11.3.1 and earlier Emerson DeltaV VE3005 versions 10.3.1 and earlier, 11.x through 11.3.1 Emerson DeltaV VE3006 versions 10.3.1 and earlier, 11.x through 11.3.1

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by sending a crafted packet to specific ports. The affected ports include TCP port 23, UDP port 161, and TCP port 513.

Recommendations For Emerson DeltaV SE3006 version 11.3.1 and earlier, update to a version later than 11.3.1 to resolve the issue. For Emerson DeltaV VE3005 versions 10.3.1 and earlier, update to a version later than 10.3.1 to resolve the issue. For Emerson DeltaV VE3005 version 11.x through 11.3.1, update to a version later than 11.3.1 to resolve the issue. For Emerson DeltaV VE3006 versions 10.3.1 and earlier, update to a version later than 10.3.1 to resolve the issue. For Emerson DeltaV VE3006 version 11.x through 11.3.1, update to a version later than 11.3.1 to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-4703

Affected Products

Deltav Se3006

Deltav Ve3005

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-4703 · Security Note
• http://ics-cert.us-cert.gov/pdf/ICSA-13-053-01.pdf · Note