NVD

Id
30780  
Name
CVE-2014-2350  
Description
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-22  
Modified Date
2014-05-23  
Seq
2014-2350  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162168 30780 CVE-2014-2350 http://ics-cert.us-cert.gov/advisories/ICSA-14-133-02  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13748 JVNDB-2014-002623 Emerson DeltaV におけるアクセス制限を回避される脆弱性 Emerson DeltaV は、診断サービスにハードコードされた認証情報を使用するため、アクセス制限を回避される脆弱性が存在します。 CVE-2014-2350 69637 CVE-2014-2350 30780 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002623.html 2014-05-22 2014-05-26 View