high7.8
CVE-2022-30260
Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature).
Impact
Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emerson | Deltav Distributed Control System Sq Controller Firmware | before 14.3 |
| Emerson | Deltav Distributed Control System Sx Controller Firmware | before 14.3 |
| Emerson | Se4002s1t2b6 High Side 40-Pin Mass I\/O Terminal Block Firmware | before 14.3 |
| Emerson | Se4003s2b4 16-Pin Mass I\/O Terminal Block Firmware | before 14.3 |
| Emerson | Se4003s2b524-Pin Mass I\/O Terminal Block Firmware | before 14.3 |
| Emerson | Se4017p0 H1 I\/O Interface Card And Terminl Block Firmware | before 14.3 |
| Emerson | Se4017p1 H1 I\/O Card With Integrated Power Firmware | before 14.3 |
| Emerson | Se4019p0 Simplex H1 4-Port Plus Fieldbus I\/O Interface With Terminalblock Firmware | before 14.3 |
| Emerson | Se4026 Virtual I\/O Module 2 Firmware | before 14.3 |
| Emerson | Se4027 Virtual I\/O Module 2 Firmware | before 14.3 |
| Emerson | Se4032s1t2b8 High Side 40-Pin Do Mass I\/O Terminal Block Firmware | before 14.3 |
| Emerson | Se4037p0 H1 I\/O Interface Card And Terminl Block Firmware | before 14.3 |