CVE-2022-2642

Published: Dec 2, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.

Affected (1)

Products: Hornerautomation: Rcc972 Firmware

Hornerautomation

1 product

Rcc972 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hornerautomation Rcc972 Firmware	Version 15.40

Running on/with	Platform Versions
Hornerautomation Rcc972	All versions

Related CWEs

CWE-1108

Excessive Reliance on Global Variables

The code is structured in a way that relies too much on using or setting global variables throughout various points in the code, instead of preserving the associated information in a narrower, more local context.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.