CVE-2022-30264

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.

• CWE-345

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Third Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Third Party Advisory

Published

Aug 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30256An issue was discovered in MaraDNS Deadwood through 3.5.0021…7.5
• CVE-2022-30257An issue was discovered in Technitium DNS Server through 8.0…9.8
• CVE-2022-30258An issue was discovered in Technitium DNS Server through 8.0…9.8
• CVE-2022-3026The WP Users Exporter plugin for WordPress is vulnerable to …8.8
• CVE-2022-30260Emerson DeltaV Distributed Control System (DCS) has insuffic…7.8
• CVE-2022-30262The Emerson ControlWave 'Next Generation' RTUs through 2022-…7.8
• CVE-2022-30269Motorola ACE1000 RTUs through 2022-05-02 mishandle applicati…8.8
• CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
• CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
• CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
• CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
• CVE-2022-30273The Motorola MDLC protocol through 2022-05-02 mishandles mes…9.8