Vulnerability Description
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emerson | Deltav Distributed Control System | <= 2022-04-29 |
| Emerson | Deltav Distributed Control System Sq Controller Firmware | <= 2022-04-29 |
| Emerson | Deltav Distributed Control System Sq Controller | - |
| Emerson | Deltav Distributed Control System Sx Controller Firmware | <= 2022-04-29 |
| Emerson | Deltav Distributed Control System Sx Controller | - |
| Emerson | Se4002S1T2B6 High Side 40-Pin Mass I\/O Terminal Block Firmware | <= 2022-04-29 |
| Emerson | Se4002S1T2B6 High Side 40-Pin Mass I\/O Terminal Block | - |
| Emerson | Se4003S2B4 16-Pin Mass I\/O Terminal Block Firmware | <= 2022-04-29 |
| Emerson | Se4003S2B4 16-Pin Mass I\/O Terminal Block | - |
| Emerson | Se4003S2B524-Pin Mass I\/O Terminal Block Firmware | <= 2022-04-29 |
| Emerson | Se4003S2B524-Pin Mass I\/O Terminal Block | - |
| Emerson | Se4017P0 H1 I\/O Interface Card And Terminl Block Firmware | <= 2022-04-29 |
| Emerson | Se4017P0 H1 I\/O Interface Card And Terminl Block | - |
| Emerson | Se4017P1 H1 I\/O Card With Integrated Power Firmware | <= 2022-04-29 |
| Emerson | Se4017P1 H1 I\/O Card With Integrated Power | - |
| Emerson | Se4019P0 Simplex H1 4-Port Plus Fieldbus I\/O Interface With Terminalblock Firmware | <= 2022-04-29 |
| Emerson | Se4019P0 Simplex H1 4-Port Plus Fieldbus I\/O Interface With Terminalblock | - |
| Emerson | Se4026 Virtual I\/O Module 2 Firmware | <= 2022-04-29 |
| Emerson | Se4026 Virtual I\/O Module 2 | - |
| Emerson | Se4027 Virtual I\/O Module 2 Firmware | <= 2022-04-29 |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03Third Party AdvisoryUS Government Resource
- https://www.forescout.com/blog/Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03Third Party AdvisoryUS Government Resource
- https://www.forescout.com/blog/Third Party Advisory
FAQ
What is CVE-2022-29965?
CVE-2022-29965 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M...
How severe is CVE-2022-29965?
CVE-2022-29965 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29965?
Check the references section above for vendor advisories and patch information. Affected products include: Emerson Deltav Distributed Control System, Emerson Deltav Distributed Control System Sq Controller Firmware, Emerson Deltav Distributed Control System Sq Controller, Emerson Deltav Distributed Control System Sx Controller Firmware, Emerson Deltav Distributed Control System Sx Controller.