PT-2022-3161 · Emerson · Emerson Deltav

Published 2022-06-22 · Updated 2024-02-13 · CVE-2022-29964

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions through 2022-04-29

Description The issue is related to the misuse of passwords in Emerson DeltaV Distributed Control System (DCS) controllers and IO cards, allowing an attacker to gain unauthorized access to protected information. The WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials.

Recommendations For versions through 2022-04-29, consider changing the hardcoded credentials to unique, secure passwords to prevent unauthorized access. As a temporary workaround, restrict access to the WIOC SSH service to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2022-03841

CVE-2022-29964

Affected Products

Emerson Deltav

References · 9

• https://osv.dev/vulnerability/CVE-2022-29964 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03841 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-29964 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-181-03 · Note
• https://forescout.com/blog · Note
• https://t.me/cvenotify/71236 · Telegram Post
• https://t.me/cibsecurity/47034 · Telegram Post
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note