CVE-2022-30260

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-12-26

Last modified

2024-08-03

Weaknesses

CWE-345

Affected products

• Deltav Distributed Control System Sq Controller Firmware (Emerson)
• Deltav Distributed Control System Sx Controller Firmware (Emerson)
• Se4002s1t2b6 High Side 40-pin Mass I/o Terminal Block Firmware (Emerson)
• Se4003s2b4 16-pin Mass I/o Terminal Block Firmware (Emerson)
• Se4003s2b524-pin Mass I/o Terminal Block Firmware (Emerson)
• Se4017p0 H1 I/o Interface Card And Terminl Block Firmware (Emerson)
• Se4017p1 H1 I/o Card With Integrated Power Firmware (Emerson)
• Se4019p0 Simplex H1 4-port Plus Fieldbus I/o Interface With Terminalblock Firmware (Emerson)
• Se4026 Virtual I/o Module 2 Firmware (Emerson)
• Se4027 Virtual I/o Module 2 Firmware (Emerson)
• Se4032s1t2b8 High Side 40-pin Do Mass I/o Terminal Block Firmware (Emerson)
• Se4037p0 H1 I/o Interface Card And Terminl Block Firmware (Emerson)
• Se4037p1 Redundant H1 I/o Card With Integrated Power And Terminal Block Firmware (Emerson)
• Se4039p0 Redundant H1 4-port Plus Fieldbus I/o Interface With Terminalblock Firmware (Emerson)
• Se4052s1t2b6 High Side 40-pin Mass I/o Terminal Block Firmware (Emerson)
• Se4082s1t2b8 High Side 40-pin Do Mass I/o Terminal Block Firmware (Emerson)
• Se4100 Simplex Ethernet I/o Card (eioc) Assembly Firmware (Emerson)
• Se4101 Simplex Ethernet I/o Card (eioc) Assembly Firmware (Emerson)
• Se4801t0x Redundant Wireless I/o Card Firmware (Emerson)
• Ve4103 Modbus Tcp Interface For Ethernet Connected I/o (eioc) Firmware (Emerson)
• Ve4104 Ethernet/ip Control Tag Integration For Ethernet Connected I/o (eioc) Firmware (Emerson)
• Ve4105 Ethernet/ip Interface For Ethernet Connected I/o (eioc) Firmware (Emerson)
• Ve4106 Opc-ua Client For Ethernet Connected I/o (eioc) Firmware (Emerson)
• Ve4107 Iec 61850 Mms Interface For Ethernet Connected I/o (eioc) Firmware (Emerson)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-03
• https://www.forescout.com/blog/