Emerson DeltaV Vulnerabilities

An attacker with network access to DeltaV could gain unauthorized control over the process automation system, potentially allowing modification of control logic, setpoints, alarms, or complete disruption of operations at water treatment, electric generation, or other critical infrastructure facilities.

Water utilities, electric utilities, refineries, and chemical plants using Emerson DeltaV as their primary process control system. Any organization relying on DeltaV for automation of critical manufacturing or infrastructure processes should evaluate exposure, particularly those with DeltaV systems directly connected to corporate networks or accessible from outside the plant.

An attacker on the network could exploit improper access controls or hard-coded credentials to authenticate to DeltaV without valid engineering credentials, gaining direct access to the control system. Once authenticated, they could manipulate process parameters or shutdown operations.