The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 through 10.3.1 and 11.x through 11.3.1 allow remote attackers to cause a denial of service (device restart) via a crafted packet on (1) TCP port 23, (2) UDP port 161, or (3) TCP port 513.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Deltav_se3006_sd_plus_controller | Emerson | * | 11.3.1 (including) |
| Deltav_ve3005_controller_md | Emerson | * | 10.3.1 (including) |
| Deltav_ve3005_controller_md | Emerson | * | 11.3.1 (including) |
| Deltav_ve3006_controller_md_plus | Emerson | * | 10.3.1 (including) |
| Deltav_ve3006_controller_md_plus | Emerson | * | 11.3.1 (including) |