CVE-2022-30269: High severity motorola ace1000 vulnerability

Published Jul 26, 2022

Updated

Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.

Affected Software

3 affected components

Motorola Ace1000 Firmware

Motorola ACE1000

Motorola Solutions ACE1000

Event History

Jul 26, 2022

CVE Published

via MITRE·10:11 PM

Data Sourced

via MITRE·10:11 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

ICSA-22-179-06

Frequently Asked Questions

What is CVE-2022-30269?

CVE-2022-30269 is a vulnerability that affects Motorola ACE1000 RTUs through 2022-05-02 and mishandles application integrity.

How does CVE-2022-30269 impact Motorola ACE1000 RTUs?

CVE-2022-30269 allows for custom application installation via STS software, C toolkit, or the ACE1000 Easy Configurator, potentially compromising the integrity of the system.

Which software versions are affected by CVE-2022-30269?

Motorola Ace1000 Firmware versions through 2022-05-02 are affected by CVE-2022-30269.

How can CVE-2022-30269 be exploited?

CVE-2022-30269 can be exploited by uploading malicious application images (PLX/DAT/APP/CRC files) through the ACE1000 Easy Configurator.

Is there a fix for CVE-2022-30269?

Motorola has not released a patch or mitigation for CVE-2022-30269. It is recommended to follow the guidance provided by US-CERT and monitor for updates from the vendor.