Deltav
Vendor:
First CVE: Jun 8, 2012 · Active for 14 years
15
Total CVEs
More Total CVEs than 93% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 77% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Deltav over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 8, 2012
14 years ago
Most Recent CVE
Jan 28, 2022
1,642 days ago
CVE Severity & Scoring
Deltav15 CVEs
47%
53%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (20.0%)
Network1 (6.7%)
Unknown8 (53.3%)
Physical0 (0.0%)
Adjacent Network3 (20.0%)
Attack Complexity
Low6 (40.0%)
High1 (6.7%)
Unknown8 (53.3%)
User Interaction
None5 (33.3%)
Unknown8 (53.3%)
Required2 (13.3%)
Privileges Required
Low3 (20.0%)
High1 (6.7%)
None3 (20.0%)
Unknown8 (53.3%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-14795HIGH DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files. | Aug 21, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14793HIGH DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution. | Aug 21, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14797HIGH Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may | Aug 23, 2018 | 7.8 | 26 | NO | NO |
CVE-2018-14791HIGH Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on the affected products. | Aug 23, 2018 | 7.8 | 25 | NO | NO |
CVE-2021-44463HIGH Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All ve | Jan 28, 2022 | 7.3 | 24 | NO | NO |
CVE-2012-1817HIGH Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to | Jun 8, 2012 | 7.5 | 24 | NO | NO |
CVE-2018-19021MEDIUM A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may | Jan 25, 2019 | 6.5 | 23 | NO | NO |
CVE-2014-2350HIGH Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP ses | May 22, 2014 | 7.5 | 23 | NO | NO |
CVE-2012-1815HIGH SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to e | Jun 8, 2012 | 7.5 | 23 | NO | NO |
CVE-2012-1818MEDIUM An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers t | Jun 8, 2012 | 6.4 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Deltav
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| r6 | 1 | 7.3 | 0.3% | 0 | 0 |
| r5 | 4 | 8.3 | 1.3% | 0 | 0 |
| 9.3.1 | 6 | 6.0 | 2.1% | 0 | 0 |
| 14.3.1 | 1 | 7.3 | 0.3% | 0 | 0 |
| 14.3 | 1 | 6.5 | 0.7% | 0 | 0 |
| 14 | 1 | 7.3 | 0.3% | 0 | 0 |
| 13.3.1 | 6 | 7.8 | 1.0% | 0 | 0 |
| 13.3.0 | 3 | 8.5 | 1.6% | 0 | 0 |
| 13.3 | 2 | 7.3 | 0.4% | 0 | 0 |
| 12.3.1 | 6 | 7.8 | 1.1% | 0 | 0 |
| 12.3 | 3 | 6.3 | 0.8% | 0 | 0 |
| 11.3.2 | 1 | 6.5 | 0.7% | 0 | 0 |
| 11.3.1 | 13 | 6.7 | 1.6% | 0 | 0 |
| 11.3 | 8 | 6.0 | 1.8% | 0 | 0 |
| 10.3.1 | 8 | 6.0 | 1.8% | 0 | 0 |