CVE-2022-29897 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
An admin user can execute arbitrary code with root privileges via the WebUI traceroute utility due to improper input validation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29897?
CVE-2022-29897 is a critical command injection vulnerability in PHOENIX CONTACT RAD-ISM-900-EN-BD, published on 11 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.
Weakness: CWE-20
Which versions are affected by CVE-2022-29897?
It affects 3 products.
Products include Phoenixcontact Rad-Ism-900-en-Bd-Bus Firmware, Phoenixcontact Rad-Ism-900-en-Bd\/B Firmware, Phoenixcontact Rad-Ism-900-en-Bd Firmware.
How do I fix CVE-2022-29897?
No fix has been published for CVE-2022-29897 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2022-29897 being exploited?
There is no known exploitation of CVE-2022-29897 in the wild and no public exploit code.
Other vulnerabilities in PHOENIX CONTACT RAD-ISM-900-EN-BD
Sources
Also known as GHSA-7gmp-h83x-qwq9.