CVE-2022-30269

Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.

• CWE-345

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable

Published

Jul 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30257An issue was discovered in Technitium DNS Server through 8.0…9.8
• CVE-2022-30258An issue was discovered in Technitium DNS Server through 8.0…9.8
• CVE-2022-3026The WP Users Exporter plugin for WordPress is vulnerable to …8.8
• CVE-2022-30260Emerson DeltaV Distributed Control System (DCS) has insuffic…7.8
• CVE-2022-30262The Emerson ControlWave 'Next Generation' RTUs through 2022-…7.8
• CVE-2022-30264The Emerson ROC and FloBoss RTU product lines through 2022-0…9.8
• CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
• CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
• CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
• CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
• CVE-2022-30273The Motorola MDLC protocol through 2022-05-02 mishandles mes…9.8
• CVE-2022-30274The Motorola ACE1000 RTU through 2022-05-02 uses ECB encrypt…9.8