← All Advisories
Reported from OT-Advisories.com as of

CVE-2022-30267

Last refreshed2026-11-04

Status: UPDATED  |  Advisory ID: CVE-2022-30267

Key Details

CVECVE-2022-30267
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-11-03
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Emerson Ovation
Classified as
CWE-345 (Insufficient Verification of Data Authenticity)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
EmersonOvation
SubsystemsGeneral OT
SectorsMultiple

What to Know

Emerson Ovation

was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution. (NVD)

What to Do

Monitor Emerson's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-30267
CVEhttps://www.cve.org/CVERecord?id=CVE-2022-30267

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.