CVE-2022-2641
First published: Thu Dec 01 2022(Updated: )
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hornerautomation Rcc972 Firmware | =15.40 | |
| Hornerautomation Rcc972 | ||
| Horner Automation RCC 972: Firmware Version 15.40 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-2641?
CVE-2022-2641 is a vulnerability in Horner Automation’s RCC 972 with firmware version 15.40 that has a static encryption key on the device.
What could an attacker do with CVE-2022-2641?
An attacker could perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
How severe is CVE-2022-2641?
CVE-2022-2641 is considered critical with a severity score of 9.8
How can I fix CVE-2022-2641?
To fix CVE-2022-2641, it is recommended to update the firmware version of Horner Automation’s RCC 972 to a version that addresses the vulnerability.
Where can I find more information about CVE-2022-2641?
You can find more information about CVE-2022-2641 in the advisory published by the Cybersecurity and Infrastructure Security Agency (CISA) at https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/severity
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/hornerautomation
- canonical/hornerautomation rcc972 firmware
- version/hornerautomation rcc972 firmware/15.40
- canonical/hornerautomation rcc972
- vendor/horner automation
- canonical/horner automation rcc 972: firmware version 15.40