CVE-2014-2349CWE-285

Emerson DeltaV Use of Improper Authorization

Medium · published May 22, 2014

CVSS v2.0
6.2
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.

The record
Technical detail
CVSS v2.0
6.2 · MEDIUM
Vector
AV:L/AC:L/Au:S/C:N/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00655 · 50.5th percentile
Weakness
CWE-285 · Improper Authorization
Published
2014-05-22T20:00Z
EPSS history
Timeline
  • 22 MAY 20:00Z
    Emerson DeltaV Use of Improper Authorization
    cvelistv5