CVE-2016-9345 Privilege escalation in Emerson DeltaV Easy Security Management through 13.3

What is CVE-2016-9345?

CVE-2016-9345 is a medium-severity vulnerability in Emerson DeltaV Easy Security Management through 13.3, published on 13 Feb 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system.

Weakness: CWE-264

Which versions are affected by CVE-2016-9345?

It affects 1 product.

Products include Emerson Deltav.

How do I fix CVE-2016-9345?

No fix has been published for CVE-2016-9345 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-9345 being exploited?

There is no known exploitation of CVE-2016-9345 in the wild and no public exploit code.

Other vulnerabilities in Emerson DeltaV Easy Security Management through 13.3

• CVE-2018-14793 Memory corruption in DeltaV High 8.8
• CVE-2018-14795 Path traversal in DeltaV High 8.8
• CVE-2021-44463 Emerson DeltaV Uncontrolled Search Path Element High 8.1
• CVE-2018-14791 Privilege escalation in DeltaV DCS High 7.8
• CVE-2018-14797 Other in DeltaV DCS High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5qgw-rx87-88x8.