Ovation vulnerabilities
CVEs whose affected-version data names the Ovation package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2022-29966Critical· 9.8Emerson Ovation Missing Authentication for Critical Functionality
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
▾ MidnightEmerson · OvationEPSS 0.39%via CVEORG
CVE-2022-30267High· 7.5Emerson Ovation Insufficient Verification of Data Authenticity
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve re…
▾ TwilightEmerson · OvationEPSS 0.31%via CVEORG