CVE-2022-30264

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.

Las líneas de productos ROC y FloBoss RTU de Emerson versiones hasta 02-05-2022, llevan a cabo operaciones no seguras en el sistema de archivos. Usan el protocolo ROC (4000/TCP, 5000/TCP) para las comunicaciones entre un terminal maestro y las RTU. El opcode 203 de este protocolo permite a un terminal maestro transferir archivos hacia y desde el sistema de archivos flash y realizar operaciones arbitrarias de lectura, escritura y eliminación de archivos y directorios.

*Credits: N/A

CVSS Scores

NISTv3.1 9.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-05-04 CVE Reserved
2022-08-16 CVE Published
2024-03-08 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-345: Insufficient Verification of Data Authenticity

CAPEC

References (2)

URL	Tag	Source
https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04	Mitigation
https://www.forescout.com/blog	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Emerson Search vendor "Emerson"	Dl8000 Firmware Search vendor "Emerson" for product "Dl8000 Firmware"	<= 2022-05-02 Search vendor "Emerson" for product "Dl8000 Firmware" and version " <= 2022-05-02"	-	Affected	in	Emerson Search vendor "Emerson"	Dl8000 Search vendor "Emerson" for product "Dl8000"	-	-	Safe
Emerson Search vendor "Emerson"	Roc809 Firmware Search vendor "Emerson" for product "Roc809 Firmware"	< 2022-05-02 Search vendor "Emerson" for product "Roc809 Firmware" and version " < 2022-05-02"	-	Affected	in	Emerson Search vendor "Emerson"	Roc809 Search vendor "Emerson" for product "Roc809"	-	-	Safe
Emerson Search vendor "Emerson"	Roc800l Firmware Search vendor "Emerson" for product "Roc800l Firmware"	<= 2022-05-02 Search vendor "Emerson" for product "Roc800l Firmware" and version " <= 2022-05-02"	-	Affected	in	Emerson Search vendor "Emerson"	Roc800l Search vendor "Emerson" for product "Roc800l"	-	-	Safe
Emerson Search vendor "Emerson"	Fb3000 Rtu Firmware Search vendor "Emerson" for product "Fb3000 Rtu Firmware"	<= 2022-05-02 Search vendor "Emerson" for product "Fb3000 Rtu Firmware" and version " <= 2022-05-02"	-	Affected	in	Emerson Search vendor "Emerson"	Fb3000 Rtu Search vendor "Emerson" for product "Fb3000 Rtu"	-	-	Safe
Emerson Search vendor "Emerson"	Roc827 Firmware Search vendor "Emerson" for product "Roc827 Firmware"	< 2022-05-02 Search vendor "Emerson" for product "Roc827 Firmware" and version " < 2022-05-02"	-	Affected	in	Emerson Search vendor "Emerson"	Roc827 Search vendor "Emerson" for product "Roc827"	-	-	Safe