CVE-2016-9345

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system.

Metrics

CVSS 3.0 6.8/10CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
n/aEmerson DeltaV Easy Security Management through 13.3Emerson DeltaV Easy Security Management through 13.3

References

Timeline

Published
Feb 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-93465.3An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration daCVE-2016-93475.0An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV WireleCVE-2016-93483.3An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pCVE-2016-93497.5An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files tCVE-2016-93517.0An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error allows an attacker tCVE-2016-93537.8An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted wiCVE-2016-93545.5An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of CVE-2016-93555.3An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and VersiCVE-2016-93567.8An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue.CVE-2016-93575.3An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer supported: EAMxxx prCVE-2016-93589.8A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A32CVE-2016-93606.7An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY
CVE-2016-9345: Medium severity, CVSS 6.8 | Vulnix