Vendor
Emerson
93 known vulnerabilities in products by Emerson, 0 of them actively exploited (CISA KEV).
Key figures
93
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-45427 | Emerson Xweb300d Evo Firmware: Path Traversal | 9.8 | |
| Critical | CVE-2021-45420 | Emerson Dixell Xweb-500 Firmware: Denial of Service | 9.8 | |
| Critical | CVE-2016-8348 | Emerson Liebert SiteScan Web: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2018-14804 | Emerson AMS Device Manager: Improper Access Control | 9.8 | |
| Critical | CVE-2020-10640 | ICSA-20-140-02 Emerson OpenEnterprise | 10.0 | |
| High | CVE-2019-10967 | Emerson Ovation OCR400 Controller: Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2019-10965 | Emerson Ovation OCR400 Controller: Heap-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2020-6970 | Emerson OpenEnterprise SCADA Server: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-11691 | Emerson Ve6046 Firmware: security vulnerability | 9.8 | |
| High | CVE-2020-19417 | Emerson Wireless 1420 Gateway Firmware: security vulnerability | 8.8 | |
| High | CVE-2020-19419 | Emerson Smart Wireless Gateway 1420 Firmware: Improper Access Control | 7.5 | |
| High | CVE-2018-14795 | ICS-CERT DeltaV: Relative Path Traversal | 8.8 | |
| Critical | CVE-2021-27459 | Emerson Rosemount X-STREAM Gas Analyzer: Unrestricted Upload of File with Dangerous Type | 9.8 | |
| High | CVE-2018-5452 | Emerson ControlWave Micro Process Automation Controller: Stack-based Buffer Overflow | 7.5 | |
| Critical | CVE-2022-29966 | Emerson Ovation Missing Authentication for Critical Functionality | 9.8 | |
| High | CVE-2018-14797 | Emerson DeltaV DCS: Uncontrolled Search Path Element | 7.8 | |
| Critical | CVE-2020-12030 | Emerson WirelessHART Gateway | 10.0 | |
| High | CVE-2021-42542 | Emerson WirelessHART Gateway | 8.0 | |
| Critical | CVE-2023-46687 | Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection | 9.8 | |
| High | CVE-2019-13524 | GE PACSystems RX3i: Improper Input Validation | 7.5 | |
| High | CVE-2021-27461 | Emerson Rosemount X-STREAM Gas Analyzer: Path Traversal | 7.5 | |
| High | CVE-2020-12525 | WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component | 7.3 | |
| High | CVE-2022-30267 | Emerson Ovation Insufficient Verification of Data Authenticity | 7.5 | |
| High | CVE-2021-45421 | Emerson Dixell Xweb-500 Firmware: Information Disclosure | 7.5 | |
| High | CVE-2020-27254 | Emerson Rosemount X-STREAM Gas Analyzer: Improper Authentication | 7.5 |