Emerson vulnerabilities
We track 20 vulnerabilities in Emerson products across 54 products. 20 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest Emerson vulnerabilities
- 7.5 High severity
Ovation: Insufficient Verification of Data Authenticity
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
- 9.8 Critical severity
Ovation: Missing Authentication for Critical Functionality
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
- 8.4 High severity
Emerson PAC Machine Edition: Unquoted Search Path or Element
Emerson PAC Machine Edition 9.80 contains an unquoted service path vulnerability in the TrapiServer service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to in
- 9.4 Critical severity
ValveLink SOLO: Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freein
- 7.7 High severity
ValveLink SOLO: Protection Mechanism Failure
Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
- 7.8 High severity
SystemLink Server: Incorrect Authorization
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.
- 7.8 High severity
SystemLink Server: Incorrect Authorization
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access.
- 8.1 High severity
Rosemount GC370XA: Improper Authentication
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.
- 9.8 Critical severity
Rosemount GC370XA: Improper Neutralization of Special Elements used in a Command
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer.
- 9.8 Critical severity
Rosemount GC370XA: Improper Neutralization of Special Elements used in a Command
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.
- 9.1 Critical severity
Rosemount GC370XA: Incorrect Authorization
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.
- 9.4 Critical severity
DL8000: Improper Authentication
ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.
- 7.8 High severity
Deltav Distributed Control System Sq…: Insufficient Verification of Data Authenticity
Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and Del
- 7.8 High severity
Proficy Machine Edition: Unrestricted Upload of File with Dangerous Type
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-434 Unrestricted Upload of File with Dangerous Type, and will upload any file written into the PLC logic folder to the connected PLC.
- 7.8 High severity
Proficy Machine Edition: Insufficient Verification of Data Authenticity
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.
- 7.5 High severity
Proficy Machine Edition: Improper Access Control
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists.
- 7.3 High severity
Proficy Machine Edition: Improper Limitation of a Pathname to a Restricted Directory
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file
- 7.8 High severity
Controlwave Pac Firmware: Insufficient Verification of Data Authenticity
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases,
- 9.8 Critical severity
Dl8000 Firmware: Insufficient Verification of Data Authenticity
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master termi
- 7.8 High severity
Deltav Distributed Control System: Missing Authentication for Critical Functionality
The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade (18508/TCP, 18518/TCP); Plug-and-Play (185