Ovation vulnerabilities
2 known vulnerabilities in Ovation from Emerson. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest first
- 7.5 High severity
Ovation: Insufficient Verification of Data Authenticity
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
- 9.8 Critical severity
Ovation: Missing Authentication for Critical Functionality
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.