CVE-2022-2641

Published: Dec 2, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.

Affected (1)

Products: Hornerautomation: Rcc972 Firmware

Hornerautomation

1 product

Rcc972 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hornerautomation Rcc972 Firmware	Version 15.40

Running on/with	Platform Versions
Hornerautomation Rcc972	All versions

Related CWEs

CWE-321

Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.