CVE-2022-30243
First published: Fri Jul 15 2022(Updated: )
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Honeywell Alterton Visual Logic Firmware | <=2022-05-04 | |
| Honeywell Alterton Visual Logic |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-30243?
CVE-2022-30243 is a vulnerability in Honeywell Alerton Visual Logic firmware that allows unauthenticated programming writes from remote users.
What is the severity of CVE-2022-30243?
The severity of CVE-2022-30243 is high with a CVSS score of 8.8.
How does CVE-2022-30243 work?
CVE-2022-30243 allows remote attackers to send crafted packets, enabling them to change and/or stop the program without authentication.
How can I fix CVE-2022-30243?
Currently, there is no known fix for CVE-2022-30243. It is recommended to follow the mitigation steps provided by the vendor and consider implementing network segmentation and access controls to limit remote access to affected systems.
Are there any references for CVE-2022-30243?
Yes, you can find more information about CVE-2022-30243 on the following references: [https://blog.scadafence.com](https://blog.scadafence.com), [https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities](https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities), [https://www.honeywell.com/us/en/product-security](https://www.honeywell.com/us/en/product-security).
- collector/nvd-index
- agent/weakness
- agent/type
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/honeywell
- canonical/honeywell alterton visual logic firmware
- version/honeywell alterton visual logic firmware/2022-05-04
- canonical/honeywell alterton visual logic