CVE-2022-30260

HIGH7.8

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature)

Published Dec 26, 2022

Modified 1 years ago

Details

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

References

WEB

https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2022-30260

WEB

https://www.forescout.com/blog/

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector