Is CVE-2022-29965 actively exploited?

No active exploitation of CVE-2022-29965 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-29965 be exploited remotely?

No. CVE-2022-29965 requires local access to exploit.

What is the CVSS score of CVE-2022-29965?

CVE-2022-29965 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2022-29965

MEDIUM

CVE-2022-29965

CWE-327Published: July 26, 2022· Updated: Jun 17, 2026

5.5

CVSS v3.1

Official Description

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350.

NVD Source

Technical Analysis

CVE-2022-29965 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Vendors & Products

emerson49 product(s)

deltav distributed control systemdeltav distributed control system sq controller firmwaredeltav distributed control system sq controllerdeltav distributed control system sx controller firmwaredeltav distributed control system sx controllerse4002s1t2b6 high side 40-pin mass i\/o terminal block firmwarese4002s1t2b6 high side 40-pin mass i\/o terminal blockse4003s2b4 16-pin mass i\/o terminal block firmwarese4003s2b4 16-pin mass i\/o terminal blockse4003s2b524-pin mass i\/o terminal block firmwarese4003s2b524-pin mass i\/o terminal blockse4017p0 h1 i\/o interface card and terminl block firmware+37

Source: NVD CPE · 49 total CPE entries