Emerson DeltaV versions 10.3.1, 11.3, 11.3.1, and 12.3 suffer from world-writable system folder and hardcoded credential vulnerabilities.
56e7ecad43c295ceb075b56c6cba23a12039fd8da5c350cd0cbaccbe42989156DeltaV Versions 10.3.1, 11.3, 11.3.1, and 12.3
Can be related to Emerson AMS Device Management version, Emerson AMS
Wireless SNAP-ON also.
CVE-2014-2349 - World writable system folder
CVE-2014-2350 - Hardcoded credentials
Please find fixes in KBA NK-1400-0031.
Kudos: Kirill Nesterov, Alexander Tlyapov, Dmitry Nagibin, Alexey Osipov
and Timur Yunusov
http://www.scadastrangelove.blogspot.com/2014/05/emerson-deltav-vulnerabilitiesfixes.html
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed