CVE-2018-19021 - A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service

Back Back to CVE browser

MEDIUM

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service

Published Jan 25, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.72%

Description

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service.

Affected products

Vendor Emerson Product Emerson DeltaV Default
unknown
Affected
- DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Emerson	Emerson DeltaV	unknown	Affected DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (3)

http://www.securityfocus.com/bid/106522
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10739
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-010-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/106522		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10739		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-010-01		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Jan 25, 2019

Updated Sep 17, 2024

Reserved Nov 6, 2018

Link CVE-2018-19021

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-19021

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Jan 25, 2019

Updated Sep 17, 2024

Link EUVD-2018-10739

GitHub

No data