CVE Feed

    Dashboard / CVE / CVE-2022-29963

    CVE-2022-29963

    The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.

    Published:Jul 26, 2022
    Last Modified:Nov 21, 2024
    EPS:Jul 26, 2022
    EPSS Score:0.00072
    CVSS Score:5.5

    Affected Products

    Vendor
    Emerson
    Product
    Deltav Distributed Control System Sq Controller
    Vendor
    Emerson
    Product
    Deltav Distributed Control System Sq Controller Firmware
    Vendor
    Emerson
    Product
    Deltav Distributed Control System Sx Controller
    Vendor
    Emerson
    Product
    Deltav Distributed Control System Sx Controller Firmware
    Vendor
    Emerson
    Product
    Se4002s1t2b6 High Side 40-pin Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4002s1t2b6 High Side 40-pin Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4003s2b4 16-pin Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4003s2b4 16-pin Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4003s2b524-pin Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4003s2b524-pin Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4017p0 H1 I\/o Interface Card And Terminl Block
    Vendor
    Emerson
    Product
    Se4017p0 H1 I\/o Interface Card And Terminl Block Firmware
    Vendor
    Emerson
    Product
    Se4017p1 H1 I\/o Card With Integrated Power
    Vendor
    Emerson
    Product
    Se4017p1 H1 I\/o Card With Integrated Power Firmware
    Vendor
    Emerson
    Product
    Se4019p0 Simplex H1 4-port Plus Fieldbus I\/o Interface With Terminalblock
    Vendor
    Emerson
    Product
    Se4019p0 Simplex H1 4-port Plus Fieldbus I\/o Interface With Terminalblock Firmware
    Vendor
    Emerson
    Product
    Se4026 Virtual I\/o Module 2
    Vendor
    Emerson
    Product
    Se4026 Virtual I\/o Module 2 Firmware
    Vendor
    Emerson
    Product
    Se4027 Virtual I\/o Module 2
    Vendor
    Emerson
    Product
    Se4027 Virtual I\/o Module 2 Firmware
    Vendor
    Emerson
    Product
    Se4032s1t2b8 High Side 40-pin Do Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4032s1t2b8 High Side 40-pin Do Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4037p0 H1 I\/o Interface Card And Terminl Block
    Vendor
    Emerson
    Product
    Se4037p0 H1 I\/o Interface Card And Terminl Block Firmware
    Vendor
    Emerson
    Product
    Se4037p1 Redundant H1 I\/o Card With Integrated Power And Terminal Block
    Vendor
    Emerson
    Product
    Se4037p1 Redundant H1 I\/o Card With Integrated Power And Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4039p0 Redundant H1 4-port Plus Fieldbus I\/o Interface With Terminalblock
    Vendor
    Emerson
    Product
    Se4039p0 Redundant H1 4-port Plus Fieldbus I\/o Interface With Terminalblock Firmware
    Vendor
    Emerson
    Product
    Se4052s1t2b6 High Side 40-pin Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4052s1t2b6 High Side 40-pin Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4082s1t2b8 High Side 40-pin Do Mass I\/o Terminal Block
    Vendor
    Emerson
    Product
    Se4082s1t2b8 High Side 40-pin Do Mass I\/o Terminal Block Firmware
    Vendor
    Emerson
    Product
    Se4100 Simplex Ethernet I\/o Card \(eioc\) Assembly
    Vendor
    Emerson
    Product
    Se4100 Simplex Ethernet I\/o Card \(eioc\) Assembly Firmware
    Vendor
    Emerson
    Product
    Se4101 Simplex Ethernet I\/o Card \(eioc\) Assembly
    Vendor
    Emerson
    Product
    Se4101 Simplex Ethernet I\/o Card \(eioc\) Assembly Firmware
    Vendor
    Emerson
    Product
    Se4801t0x Redundant Wireless I\/o Card
    Vendor
    Emerson
    Product
    Se4801t0x Redundant Wireless I\/o Card Firmware
    Vendor
    Emerson
    Product
    Ve4103 Modbus Tcp Interface For Ethernet Connected I\/o \(eioc\)
    Vendor
    Emerson
    Product
    Ve4103 Modbus Tcp Interface For Ethernet Connected I\/o \(eioc\) Firmware
    Vendor
    Emerson
    Product
    Ve4104 Ethernet\/ip Control Tag Integration For Ethernet Connected I\/o \(eioc\)
    Vendor
    Emerson
    Product
    Ve4104 Ethernet\/ip Control Tag Integration For Ethernet Connected I\/o \(eioc\) Firmware
    Vendor
    Emerson
    Product
    Ve4105 Ethernet\/ip Interface For Ethernet Connected I\/o \(eioc\)
    Vendor
    Emerson
    Product
    Ve4105 Ethernet\/ip Interface For Ethernet Connected I\/o \(eioc\) Firmware
    Vendor
    Emerson
    Product
    Ve4106 Opc-ua Client For Ethernet Connected I\/o \(eioc\)
    Vendor
    Emerson
    Product
    Ve4106 Opc-ua Client For Ethernet Connected I\/o \(eioc\) Firmware
    Vendor
    Emerson
    Product
    Ve4107 Iec 61850 Mms Interface For Ethernet Connected I\/o \(eioc\)
    Vendor
    Emerson
    Product
    Ve4107 Iec 61850 Mms Interface For Ethernet Connected I\/o \(eioc\) Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High