CVE-2022-30260

HIGH

Emerson DeltaV Distributed Control System < 14.3 - Insufficient Firmware Integrity Verification

Title source: llm
STIX 2.1

Description

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
Not Applicable, Third Party Advisory
https://www.forescout.com/blog/

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-345
Status published
Products (24)
emerson/deltav_distributed_control_system_sq_controller_firmware < 14.3
emerson/deltav_distributed_control_system_sx_controller_firmware < 14.3
emerson/se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware < 14.3
emerson/se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware < 14.3
emerson/se4003s2b524-pin_mass_i\/o_terminal_block_firmware < 14.3
emerson/se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware < 14.3
emerson/se4017p1_h1_i\/o_card_with_integrated_power_firmware < 14.3
emerson/se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware < 14.3
emerson/se4026_virtual_i\/o_module_2_firmware < 14.3
emerson/se4027_virtual_i\/o_module_2_firmware < 14.3
... and 14 more
Published Dec 26, 2022
Tracked Since Feb 18, 2026