CVE-2014-2350
Emerson DeltaV Use of Hard-coded Credentials
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
Exploit likelihood
What each source reports
CVE List Score used
Emerson DeltaV Use of Hard-coded Credentials
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
- Record
CVE-2014-2350- CVSS 2.0
- 2.4
AV:L/AC:H/Au:S/C:N/I:P/A:P - Weakness
- CWE-798
- Updated
- 2026-11-02
EUVDEUVD-2014-2387
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
- Record
EUVD-2014-2387- CVSS 2.0
- 2.4 Low
AV:L/AC:H/Au:S/C:N/I:P/A:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hhp6-57mg-2wmw No score
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services,...
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
- Record
GHSA-hhp6-57mg-2wmw- Weakness
- CWE-798
- Updated
- 2026-11-02
NVD
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program.
- Record
CVE-2014-2350- CVSS 2.0
- 2.4 Low
AV:L/AC:H/Au:S/C:N/I:P/A:P - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-798, CWE-255
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2350 is a vulnerability (CVSS 2.4) in Emerson Deltav, published May 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.