CVE-2022-30273

The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.

• CWE-327
• CWE-345

• https://en.wikipedia.org/wiki/Block_cipher_mode_of_operationThird Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-05Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable, Third Party Advisory
• https://en.wikipedia.org/wiki/Block_cipher_mode_of_operationThird Party Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-05Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable, Third Party Advisory

Published

Jul 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30264The Emerson ROC and FloBoss RTU product lines through 2022-0…9.8
• CVE-2022-30269Motorola ACE1000 RTUs through 2022-05-02 mishandle applicati…8.8
• CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
• CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
• CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
• CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
• CVE-2022-30274The Motorola ACE1000 RTU through 2022-05-02 uses ECB encrypt…9.8
• CVE-2022-30275The Motorola MOSCAD Toolbox software through 2022-05-02 reli…7.5
• CVE-2022-30276The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 …7.5
• CVE-2022-30277BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an …5.7
• CVE-2022-30278A vulnerability in Black Duck Hub’s embedded MadCap Flare do…6.1
• CVE-2022-30279An issue was discovered in Stormshield Network Security (SNS…7.5