https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:37:50.062385+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03837 bdu:2022-03837 2026-10-05T23:37:50.066022+00:00 bdu:2022-03837 https://cve.radiocsirt.org/vuln/euvd-2026-16350 EUVD-2026-16350 2026-10-05T23:37:50.066053+00:00 EUVD-2026-16350 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29962 fkie_cve-2022-29962 2026-10-05T23:37:50.066067+00:00

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.

 https://cve.radiocsirt.org/vuln/ghsa-79fv-frff-xcj5 GHSA-79fv-frff-xcj5 2026-10-05T23:37:50.066096+00:00

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.

 https://cve.radiocsirt.org/vuln/gsd-2022-29962 gsd-2022-29962 2026-10-05T23:37:50.066112+00:00 gsd-2022-29962 https://cve.radiocsirt.org/vuln/icsa-22-181-03 ICSA-22-181-03 — Emerson DeltaV Distributed Control System 2026-10-05T23:37:50.066123+00:00

Several protocols, including Firmware upgrade, Plug-and-Play, Hawk services, Management, SIS communications, and multi-cast have no authentication. This could allow an attacker who has reverse-engineered communications to invoke desired functionality or cause a denial-of-service condition.CVE-2022-29957 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been assigned; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). The affected product is vulnerable by using hard-coded credentials in the FTP service, which is disabled by default.CVE-2022-29962 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L). The affected product is vulnerable to hard-coded credential use within the read-only Telnet service.CVE-2022-29963 has been assigned to this vulnerability. A CVSS v3 base score of 1.8 has been assigned; the CVSS vector string is (AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N). The affected product is vulnerable to hard-coded credential use within the SSH service, which is disabled by default.CVE-2022-29964 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L). Firmware images are not signed and rely on insecure checksums for regular integrity checks. This could allow an attacker to push malicious firmware images, execute code, or cause a denial-of-service condi…