CVE-2022-29897: Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
First published: Wed May 11 2022(Updated: )
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Phoenixcontact Rad-ism-900-en-bd Firmware | ||
| Phoenixcontact Rad-ism-900-en-bd | ||
| Phoenixcontact Rad-ism-900-en-bd\/b Firmware | ||
| Phoenixcontact Rad-ism-900-en-bd\/b | ||
| Phoenixcontact Rad-ism-900-en-bd-bus Firmware | ||
| Phoenixcontact Rad-ism-900-en-bd-bus |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-29897.
What is the severity level of CVE-2022-29897?
CVE-2022-29897 has a severity level of critical (9.1).
Which devices are affected by CVE-2022-29897?
Various RAD-ISM-900-EN-* devices by PHOENIX CONTACT are affected by CVE-2022-29897.
How can an admin user exploit CVE-2022-29897?
An admin user can exploit CVE-2022-29897 by using the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS.
Is there a fix available for CVE-2022-29897?
Please refer to the vendor's advisory for information on available fixes for CVE-2022-29897.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/phoenixcontact
- canonical/phoenixcontact rad-ism-900-en-bd firmware
- canonical/phoenixcontact rad-ism-900-en-bd
- canonical/phoenixcontact rad-ism-900-en-bd\/b firmware
- canonical/phoenixcontact rad-ism-900-en-bd\/b
- canonical/phoenixcontact rad-ism-900-en-bd-bus firmware
- canonical/phoenixcontact rad-ism-900-en-bd-bus