VULNERABILITY INTELLIGENCE

CVE-2021-44463

CVSS score8.1 HIGH

EPSS probability0.26%

CISA KEVNot currently listed

Published2022-01-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Description

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

Weakness classification

nvd@nist.gov: CWE-427
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-427

Primary references

ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource