PT-2022-12123 · Unknown · Deltav Distributed Control System

Sharon Brizinov · Published 2022-01-28 · Updated 2022-07-12 · CVE-2021-44463

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions DeltaV Distributed Control System Controllers and Workstations (All versions)

Description The issue allows an attacker to achieve local privilege escalation when some DeltaV services are started, by replacing missing DLLs. This could be done by an insider.

Recommendations For all versions, consider restricting access to the system to prevent insiders from replacing DLLs until a fix is available. As a temporary workaround, monitor the system for any suspicious activity related to DeltaV services. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-44463

Affected Products

Deltav Distributed Control System

References · 5

• https://osv.dev/vulnerability/CVE-2021-44463 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44463 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-21-355-04 · Note
• https://t.me/cvenotify/25989 · Telegram Post
• https://t.me/cvenotify/32949 · Telegram Post