QID 590512

QID 590512: Emerson DeltaV DoS Vulnerability (ICSA-19-010-01)

AFFECTED PRODUCTS
Emerson reports the vulnerability affects the following DeltaV Distributed Control System Workstations products:
DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior.

QID Detection Logic (Authenticated)
QID checks for the Vulnerable version using windows registry keys

Successful exploitation of this vulnerability could allow an attacker to shut down a service, resulting in a denial of service.

  • CVSS V3 rated as High - 6.5 severity.
  • CVSS V2 rated as Medium - 3.3 severity.
  • Solution

    Customers are advised to refer to CERT MITIGATIONS section ICSA-19-010-01 for affected packages and patching details.

    Vendor References

    CVEs related to QID 590512

    Software Advisories
    Advisory ID Software Component Link
    ICSA-19-010-01 URL Logo www.us-cert.gov/ics/advisories/ICSA-19-010-01