CVE-2022-30267

Ovation: Ovation: Arbitrary code execution via unverified firmware updates

Ovation

Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.

4. Nov 2026

Ausgewertete Quellen

• Red Hat
  Red Hat
• CISA
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-02
• NVD
  CVE-2022-30267