SQL Injection in Emerson Deltav
CVE-2012-1815
SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Vulnerability class: SQL Injection
EPSS: 0.015 (71.8th percentile) — read the EPSS interpretation.
Affected products
- Emerson Deltav — versions 9.3.1, 10.3.1, 11.3
- Emerson Deltav_proessentials_scientific_graph — versions 5.0.0.6
- Emerson Deltav_workstation — versions 9.3.1, 10.3.1, 11.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (US Government Resource, x_refsource_MISC)