CVE-2022-30244: High severity honeywell alerton ascent control module vulnerability
Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30244?
CVE-2022-30244 is a vulnerability that allows unauthenticated programming writes from remote users in Honeywell Alerton Ascent Control Module (ACM) firmware before 2022-05-04.
How does CVE-2022-30244 impact users?
CVE-2022-30244 allows remote users to send crafted packets to change and/or stop the program running on the controller without authentication.
What is the severity of CVE-2022-30244?
CVE-2022-30244 has a severity level of high with a severity value of 8.
How can I fix CVE-2022-30244?
To fix CVE-2022-30244, users should update their Honeywell Alerton Ascent Control Module (ACM) firmware to version 2022-05-04 or later.
Where can I find more information about CVE-2022-30244?
More information about CVE-2022-30244 can be found at the following references: [link1], [link2], [link3].