published May 14, 2019
⚠️ The DeltaV Smart Switch Command Center can’t change its management password during commissioning! It's like trying to get a new key for your office but the locksmith insists your old one is still good. 😱 Think of it like having a restaurant where the chef forgets to update the menu. All those hungry customers are ordering off the old menu, and they don't even know their favorite dish is no longer available. In this case, the Smart Switch Command Center is outdated and users can’t set a new password to secure their devices! This oversight could leave your DeltaV Smart Switches vulnerable, allowing unauthorized access to critical systems. An attacker with physical or network access might exploit this to gain control, making it absolutely devastating for operations if they can manipulate network configurations or other sensitive settings.
Think of it like having a restaurant where the chef forgets to update the menu. All those hungry customers are ordering off the old menu, and they don't even know their favorite dish is no longer available. In this case, the Smart Switch Command Center is outdated and users can’t set a new password to secure their devices! CVE-2018-11691 affects Emerson DeltaV Smart Switch Command Center versions 11.3.x and 12.3.1, preventing users from changing the management password upon commissioning, which poses a security risk if default credentials are left unchanged.
This oversight could leave your DeltaV Smart Switches vulnerable, allowing unauthorized access to critical systems. An attacker with physical or network access might exploit this to gain control, making it absolutely devastating for operations if they can manipulate network configurations or other sensitive settings. To remediate this issue, download the necessary patches from Emerson’s Guardian Support Portal and apply them to your DeltaV workstations. After patching, make sure to either re-commission the DeltaV Smart Switches or change the password using the available tool to ensure security. You've got this! Implement these patching steps, and you'll fortify your system in no time. 🛡️