CVE-2021-44463

Emerson DeltaV Uncontrolled Search Path Element

High · published January 28, 2022

CVSS v3.1
8.1
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Published
2022-01-28T19:09Z
EPSS history
Timeline
  • 28 JAN 19:09Z
    Emerson DeltaV Uncontrolled Search Path Element
    cvelistv5