CVE-2012-1818 - Vulnerability Details - OpenCVE

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00562.

Key SSVC decision points have not yet been added.

Vendors	Products
Emerson Subscribe	Deltav Subscribe Deltav Proessentials Scientific Graph Subscribe Deltav Workstation Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:emerson:deltav:9.3.1:::::::*
	cpe:2.3:a:emerson:deltav:10.3.1:::::::*
	cpe:2.3:a:emerson:deltav:11.3:::::::*
	cpe:2.3:a:emerson:deltav:11.3.1:::::::*
	cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:::::::*
	cpe:2.3:a:emerson:deltav_workstation:9.3.1:::::::*
	cpe:2.3:a:emerson:deltav_workstation:10.3.1:::::::*
	cpe:2.3:a:emerson:deltav_workstation:11.3:::::::*
	cpe:2.3:a:emerson:deltav_workstation:11.3.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2012-1828	An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/82014
http://secunia.com/advisories/49210
http://www.securityfocus.com/bid/53591
http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2012-06-08T18:00:00

Updated: 2024-08-06T19:08:38.840Z

Reserved: 2012-03-21T00:00:00

Link: CVE-2012-1818

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-06-08T18:55:01.707

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-1818

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-264

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-05-30T00:00:00", "descriptions": [{"lang": "en", "value": "An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-09-29T09:00:00", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"name": "82014", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/82014"}, {"name": "49210", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/49210"}, {"name": "53591", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/53591"}, {"tags": ["x_refsource_MISC"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@cert.org", "ID": "CVE-2012-1818", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "82014", "refsource": "OSVDB", "url": "http://osvdb.org/82014"}, {"name": "49210", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/49210"}, {"name": "53591", "refsource": "BID", "url": "http://www.securityfocus.com/bid/53591"}, {"name": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf", "refsource": "MISC", "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T19:08:38.840Z"}, "title": "CVE Program Container", "references": [{"name": "82014", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/82014"}, {"name": "49210", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/49210"}, {"name": "53591", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/53591"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2012-1818", "datePublished": "2012-06-08T18:00:00", "dateReserved": "2012-03-21T00:00:00", "dateUpdated": "2024-08-06T19:08:38.840Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:emerson:deltav:9.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "2A47A4CF-7DC2-40BF-8665-261C17A4159B", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav:10.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "E005DD9A-07FB-4DE2-810B-372E62A091B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav:11.3:*:*:*:*:*:*:*", "matchCriteriaId": "D0123046-D89E-4FBB-9176-C04E0C65E9AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav:11.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "943B3480-56C4-4131-BE8F-62FE035D4619", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "75620876-5526-451E-8284-3CB1BF16642F", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav_workstation:9.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7B41EAEE-53EC-4EF0-BB63-58772E4D6278", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav_workstation:10.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "FE35A6AE-616B-4254-83B6-50726498B765", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav_workstation:11.3:*:*:*:*:*:*:*", "matchCriteriaId": "E5C9C34A-FE86-4B79-BC2F-14B7F6320A8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:emerson:deltav_workstation:11.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "A164A098-9568-476F-BE49-D847378A7BE9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors."}, {"lang": "es", "value": "Un control ActiveX no especificado en Emerson DeltaV y DeltaV Workstations v9.3.1, v10.3.1, v11.3, y v11.3.1 y DeltaV ProEssentials Scientific Graph v5.0.0.6 permite a atacantes remotos sobrescribir ficheros a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2012-1818", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-06-08T18:55:01.707", "references": [{"source": "cret@cert.org", "url": "http://osvdb.org/82014"}, {"source": "cret@cert.org", "url": "http://secunia.com/advisories/49210"}, {"source": "cret@cert.org", "url": "http://www.securityfocus.com/bid/53591"}, {"source": "cret@cert.org", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/82014"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/49210"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/53591"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-12-138-01.pdf"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}