Emerson DeltaV Distributed Control System Use of Hard-Coded Credentials (CVE-2022-29962, CVE-2022-29963, CVE-2022-29964, CVE-2022-29965, CVE-2022-30261, CVE-2022-30263, CVE-2022-30266)

info Tenable OT Security Plugin ID 500658

Synopsis

The remote OT asset may be affected by a vulnerability.

Description

The device may be vulnerable to flaws related to OT:ICEFALL. These vulnerabilities identify the insecure-by-design nature of OT devices and may not have a clear remediation path. As such, Nessus is unable to test specifically for these vulnerabilities but has identified the device to be one that was listed in the OT:ICEFALL report. Ensure your OT deployments follow best practices including accurate inventory, separation of environments, and monitoring. This plugin will trigger on any device seen by Tenable.OT that matches a family or model listed in the OT:ICEFALL report.

Note: All findings need to be manually verified based on the advisory from the vendor, once released.

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.

Emerson has provided the following mitigations or workarounds:

Emerson has corrected CVE-2022-29965 in all currently supported versions of DeltaV. For additional mitigations and preventative measures, please see the Emerson Guardian Support Portal (login required).

Emerson has mitigated CVE-2022-29962, CVE-2022-29963, and CVE-2022-29964 in all currently supported versions of DeltaV.
Please see the Emerson Guardian Support Portal (login required) for more information.

Emerson corrected the Firmware image verification vulnerability in Version 14.3 and mitigated it in all other versions.
Please see the Emerson Guardian Support Portal (login required) for more information.

Plugin Details

Severity: Info

ID: 500658

Version: 1.3

Type: remote

Family: Tenable.ot

Published: 6/22/2022

Updated: 7/24/2023

Risk Information

VPR

Risk Factor: High

Score: 8.4

Vulnerability Information

CPE: cpe:/h:emerson:ovation_ocr1100, cpe:/h:emerson:ovation_occ100, cpe:/h:emerson:ovation_ocr400, cpe:/h:emerson:roc_300, cpe:/h:emerson:roc_800, cpe:/h:emerson:dl_8000, cpe:/h:emerson:pacsystems_rx7i, cpe:/h:emerson:pacsystems_rx3i

Required KB Items: Tenable.ot/Emerson

Vulnerability Publication Date: 6/22/2022

Reference Information

CVE: CVE-2022-29962, CVE-2022-29963, CVE-2022-29964, CVE-2022-29965, CVE-2022-30261, CVE-2022-30263, CVE-2022-30266

Detections

Analytics