Security Advisory

CVE-2014-2350

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-22 20:00:00
Last updated 2025-10-31 22:55:07
Assigner icscert
CVSS score 2.4
State PUBLISHED

Description

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.