https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:06:05.755605+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03856 bdu:2022-03856 2026-10-05T15:06:05.759424+00:00 bdu:2022-03856 https://cve.radiocsirt.org/vuln/euvd-2026-16438 EUVD-2026-16438 2026-10-05T15:06:05.759455+00:00 EUVD-2026-16438 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30260 fkie_cve-2022-30260 2026-10-05T15:06:05.759469+00:00

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

 https://cve.radiocsirt.org/vuln/ghsa-xc7c-c2g3-58v4 GHSA-xc7c-c2g3-58v4 2026-10-05T15:06:05.759497+00:00

Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.

 https://cve.radiocsirt.org/vuln/gsd-2022-30260 gsd-2022-30260 2026-10-05T15:06:05.759513+00:00 gsd-2022-30260 https://cve.radiocsirt.org/vuln/icsa-22-181-03 ICSA-22-181-03 — Emerson DeltaV Distributed Control System 2026-10-05T15:06:05.759525+00:00

Several protocols, including Firmware upgrade, Plug-and-Play, Hawk services, Management, SIS communications, and multi-cast have no authentication. This could allow an attacker who has reverse-engineered communications to invoke desired functionality or cause a denial-of-service condition.CVE-2022-29957 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been assigned; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). The affected product is vulnerable by using hard-coded credentials in the FTP service, which is disabled by default.CVE-2022-29962 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L). The affected product is vulnerable to hard-coded credential use within the read-only Telnet service.CVE-2022-29963 has been assigned to this vulnerability. A CVSS v3 base score of 1.8 has been assigned; the CVSS vector string is (AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N). The affected product is vulnerable to hard-coded credential use within the SSH service, which is disabled by default.CVE-2022-29964 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L). Firmware images are not signed and rely on insecure checksums for regular integrity checks. This could allow an attacker to push malicious firmware images, execute code, or cause a denial-of-service condi…