CVE-2022-29966

Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.

Missing authentication in control protocols may let an unauthenticated attacker alter controller configuration or disrupt the control system. In an industrial environment this can cause downtime or unsafe process changes.

Restrict network access to Ovation protocols through network segmentation and firewalls, and apply vendor-recommended compensating controls. Monitor traffic to controllers for unauthorized configuration changes.