CVE-2014-2350CWE-798

Emerson DeltaV Use of Hard-coded Credentials

Low · published May 22, 2014

CVSS v2.0
2.4
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.

The record
Technical detail
CVSS v2.0
2.4 · LOW
Vector
AV:L/AC:H/Au:S/C:N/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.01319 · 70.4th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2014-05-22T20:00Z
EPSS history
Timeline
  • 22 MAY 20:00Z
    Emerson DeltaV Use of Hard-coded Credentials
    cvelistv5