CVE-2022-2641

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.

• CWE-321

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02Patch, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02Patch, Third Party Advisory, US Government Resource

Published

Dec 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2639An integer coercion error was found in the openvswitch kerne…7.8
• CVE-2022-26390The Baxter Spectrum Wireless Battery Module (WBM) stores net…4.2
• CVE-2022-26392The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WB…6.5
• CVE-2022-26393The Baxter Spectrum WBM is susceptible to format string atta…8.1
• CVE-2022-26394The Baxter Spectrum WBM does not perform mutual authenticati…5.4
• CVE-2022-2640The Config-files of Horner Automation’s RCC 972 with firmwar…7.5
• CVE-2022-26413A command injection vulnerability in the CGI program of Zyxe…8
• CVE-2022-26414A potential buffer overflow vulnerability was identified in …5.5
• CVE-2022-26415On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versi…9.1
• CVE-2022-26416Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2022-26417Omron CX-Position (versions 2.5.3 and prior) is vulnerable t…7.8
• CVE-2022-26418Rejected reason: This candidate was in a CNA pool that was n…