# cve.now: Emerson

The newest entries naming Emerson as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2022-30267](https://cve.now/CVE-2022-30267.md): Emerson Ovation Insufficient Verification of Data Authenticity (CVSS 7.5)
- [CVE-2022-29966](https://cve.now/CVE-2022-29966.md): Emerson Ovation Missing Authentication for Critical Functionality (CVSS 9.8)
- [CVE-2022-50930](https://cve.now/CVE-2022-50930.md): Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service Path (CVSS 8.5)
- [CVE-2025-53471](https://cve.now/CVE-2025-53471.md): Emerson ValveLink Products Improper Input Validation (CVSS 5.1)
- [CVE-2025-48496](https://cve.now/CVE-2025-48496.md): Emerson ValveLink Products Uncontrolled Search Path Element (CVSS 5.1)
- [CVE-2025-46358](https://cve.now/CVE-2025-46358.md): Emerson ValveLink Products Protection Mechanism Failure (CVSS 7.7)
- [CVE-2025-50109](https://cve.now/CVE-2025-50109.md): Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory (CVSS 7.7)
- [CVE-2025-52579](https://cve.now/CVE-2025-52579.md): Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory (CVSS 9.4)
- [CVE-2023-43609](https://cve.now/CVE-2023-43609.md): Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorization (CVSS 6.9)
- [CVE-2023-46687](https://cve.now/CVE-2023-46687.md): Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection (CVSS 9.8)
- [CVE-2023-49716](https://cve.now/CVE-2023-49716.md): Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection (CVSS 6.9)
- [CVE-2023-51761](https://cve.now/CVE-2023-51761.md): Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication (CVSS 8.3)
- [CVE-2020-16235](https://cve.now/CVE-2020-16235.md): Emerson OpenEnterprise - Inadequate Encryption Strength (CVSS 3.8)
- [CVE-2020-10636](https://cve.now/CVE-2020-10636.md): ICSA-20-140-02 Emerson OpenEnterprise (CVSS 6.5)
- [CVE-2020-10640](https://cve.now/CVE-2020-10640.md): ICSA-20-140-02 Emerson OpenEnterprise (CVSS 10.0)
- [CVE-2020-10632](https://cve.now/CVE-2020-10632.md): ICSA-20-140-02 Emerson OpenEnterprise (CVSS 8.8)
- [CVE-2021-38485](https://cve.now/CVE-2021-38485.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2021-42542](https://cve.now/CVE-2021-42542.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2021-42540](https://cve.now/CVE-2021-42540.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2021-42536](https://cve.now/CVE-2021-42536.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2021-42539](https://cve.now/CVE-2021-42539.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2021-42538](https://cve.now/CVE-2021-42538.md): Emerson WirelessHART Gateway (CVSS 8.0)
- [CVE-2020-12030](https://cve.now/CVE-2020-12030.md): Emerson WirelessHART Gateway (CVSS 10.0)
- [CVE-2020-6970](https://cve.now/CVE-2020-6970.md): A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are (no CVSS)
- [CVE-2019-10967](https://cve.now/CVE-2019-10967.md): In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server i (no CVSS)
- [CVE-2019-10965](https://cve.now/CVE-2019-10965.md): In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server in (no CVSS)
- [CVE-2018-19021](https://cve.now/CVE-2018-19021.md): A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3 (no CVSS)
- [CVE-2018-14808](https://cve.now/CVE-2018-14808.md): Emerson AMS Device Manager v12.0 to v13.5. (no CVSS)
- [CVE-2018-14804](https://cve.now/CVE-2018-14804.md): Emerson AMS Device Manager v12.0 to v13.5. (no CVSS)
- [CVE-2018-14797](https://cve.now/CVE-2018-14797.md): Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded (no CVSS)
- [CVE-2018-14791](https://cve.now/CVE-2018-14791.md): Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 may allow non-administrative users to change executable and library files on (no CVSS)
- [CVE-2014-2350](https://cve.now/CVE-2014-2350.md): Emerson DeltaV Use of Hard-coded Credentials (no CVSS)
- [CVE-2014-2349](https://cve.now/CVE-2014-2349.md): Emerson DeltaV Use of Improper Authorization (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/emerson
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.