CVE-2022-30264
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2022-05-02 |
| Running on/with | Platform Versions |
|---|---|
Emerson Dl8000 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2022-05-02 |
| Running on/with | Platform Versions |
|---|---|
Emerson Roc809 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2022-05-02 |
| Running on/with | Platform Versions |
|---|---|
Emerson Roc800l | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2022-05-02 |
| Running on/with | Platform Versions |
|---|---|
Emerson Fb3000 Rtu | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2022-05-02 |
| Running on/with | Platform Versions |
|---|---|
Emerson Roc827 | All versions |
References (4)
Source: cve@mitre.org
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource
Timeline
No history available yet.