Controlwave Micro Firmware

controlwave_micro_firmware

Vendor: Emerson • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-30262

1Emerson

2Controlwave Micro Firmware

Controlwave Pac Firmware

Jun 17, 2026

Aug 17, 2022

N/A· v4

7.8 HIGH· v3

N/A· v2

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.Show less

CVE-2018-5452

1Emerson

1Controlwave Micro Firmware

Jun 17, 2026

Mar 7, 2018

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547 could force the PLC to change its state into halt mode.Show less