What is CVE-2021-44463?

CVE-2021-44463 is a high-severity vulnerability in Emerson Deltav, classified under Uncontrolled Search Path Element. CVSS score: 8.1/10. Published 2022-01-28.

How severe is CVE-2021-44463?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Emerson Deltav

CVE-2021-44463

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

EPSS: 0.003 (18.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H.

Affected products

Emerson Deltav — versions 13.3.1, 14, 14.3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2021-44463?: CVE-2021-44463 is a high-severity vulnerability in Emerson Deltav, classified under Uncontrolled Search Path Element. CVSS score: 8.1/10. Published 2022-01-28.
How severe is CVE-2021-44463?: High severity. CVSS v3 base score is 8.1 out of 10.