CVE-2022-30262
Last modified
CVE-2022-30262 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Emerson | Controlwave Pac Firmware | <= 2022-05-02 |
| Emerson | Controlwave Micro Firmware | <= 2022-05-02 |
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-02Mitigation, Third Party Advisory, US Government Resource
- https://www.forescout.com/blog/Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-221-02Mitigation, Third Party Advisory, US Government Resource
- https://www.forescout.com/blog/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-30262?
How severe is CVE-2022-30262?
How do I fix CVE-2022-30262?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-3025The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 …5.4
- CVE-2022-30256An issue was discovered in MaraDNS Deadwood through 3.5.0021…7.5
- CVE-2022-30257An issue was discovered in Technitium DNS Server through 8.0…9.8
- CVE-2022-30258An issue was discovered in Technitium DNS Server through 8.0…9.8
- CVE-2022-3026The WP Users Exporter plugin for WordPress is vulnerable to …8.8
- CVE-2022-30260Emerson DeltaV Distributed Control System (DCS) has insuffic…7.8
- CVE-2022-30264The Emerson ROC and FloBoss RTU product lines through 2022-0…9.8
- CVE-2022-30269Motorola ACE1000 RTUs through 2022-05-02 mishandle applicati…8.8
- CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
- CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
- CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
- CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
Are you affected by CVE-2022-30262?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST