CVE-2022-30274

The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded client. Credentials for accessing this gateway are stored after being encrypted with the Tiny Encryption Algorithm (TEA) in ECB mode using a hardcoded key. Similarly, the ACE1000 RTU can route MDLC traffic over Extended Command and Management Protocol (XCMP) and Network Layer (XNL) networks via the MDLC driver. Authentication to the XNL port is protected by TEA in ECB mode using a hardcoded key.

• CWE-798

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06Mitigation, Third Party Advisory, US Government Resource
• https://www.forescout.com/blog/Not Applicable

Published

Jul 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30269Motorola ACE1000 RTUs through 2022-05-02 mishandle applicati…8.8
• CVE-2022-3027The CMS8000 device does not properly control or sanitize the…5.7
• CVE-2022-30270The Motorola ACE1000 RTU through 2022-05-02 has default cred…9.8
• CVE-2022-30271The Motorola ACE1000 RTU through 2022-05-02 ships with a har…9.8
• CVE-2022-30272The Motorola ACE1000 RTU through 2022-05-02 mishandles firmw…7.2
• CVE-2022-30273The Motorola MDLC protocol through 2022-05-02 mishandles mes…9.8
• CVE-2022-30275The Motorola MOSCAD Toolbox software through 2022-05-02 reli…7.5
• CVE-2022-30276The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 …7.5
• CVE-2022-30277BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an …5.7
• CVE-2022-30278A vulnerability in Black Duck Hub’s embedded MadCap Flare do…6.1
• CVE-2022-30279An issue was discovered in Stormshield Network Security (SNS…7.5
• CVE-2022-3028A race condition was found in the Linux kernel's IP framewor…7