description: Emerson DeltaV DCS versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, R5 allow a specially crafted DLL file to be placed in the search path and loaded as an internal and valid DLL, which may allow arbitrary code execution.
problem types: UNCONTROLLED SEARCH PATH ELEMENT CWE-427
affected:
{
product: DeltaV DCS
vendor: Emerson
versions:
status: affected, version: v11.3.1, v12.3.1, v13.3.0, v13.3.1, R5
}