CVE-2022-30267

Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.

Lack of firmware signature verification allows an attacker to push malicious firmware to control devices, potentially disrupting industrial processes or taking control of the system.

Apply compensating controls such as network segmentation and restricted device access, and contact the vendor for patches and secure firmware deployment guidance.