Vulnerability in Emerson Ovation

[ Description ]Official description

Emerson Ovation  was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund3 Nov 2026WID-SEC-2026-4313

  Emerson Ovation: Multiple vulnerabilities Translated from German

  Risk highCVE-2022-29966CVE-2022-30267

[ References ]References

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2024/icsa-24-158-02.json
• www.cisa.gov/news-events/ics-advisories/icsa-24-158-02