CVE-2022-30267
Last modified
CVE-2022-30267 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
Emerson Ovation was found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Emerson | Ovation | <= Version 3.8.0 Feature Pack 1 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2022-30267?
How severe is CVE-2022-30267?
How do I fix CVE-2022-30267?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-30257An issue was discovered in Technitium DNS Server through 8.0…9.8
- CVE-2022-30258An issue was discovered in Technitium DNS Server through 8.0…9.8
- CVE-2022-3026The WP Users Exporter plugin for WordPress is vulnerable to …8.8
- CVE-2022-30260Emerson DeltaV Distributed Control System (DCS) has insuffic…7.8
- CVE-2022-30262The Emerson ControlWave 'Next Generation' RTUs through 2022-…7.8
- CVE-2022-30264The Emerson ROC and FloBoss RTU product lines through 2022-0…9.8
- CVE-2022-30269Motorola ACE1000 RTUs through 2022-05-02 mishandle applicati…8.8
- CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
- CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
- CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
- CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
- CVE-2022-30273The Motorola MDLC protocol through 2022-05-02 mishandles mes…9.8
Are you affected by CVE-2022-30267?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST