CVE-2022-29898 Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
An admin user can execute arbitrary code with root privileges via the WebUI configuration file uploader due to improper integrity validation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29898?
CVE-2022-29898 is a critical vulnerability in PHOENIX CONTACT RAD-ISM-900-EN-BD, published on 11 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.
Weakness: CWE-354
Which versions are affected by CVE-2022-29898?
It affects 3 products.
Products include Phoenixcontact Rad-Ism-900-en-Bd-Bus Firmware, Phoenixcontact Rad-Ism-900-en-Bd\/B Firmware, Phoenixcontact Rad-Ism-900-en-Bd Firmware.
How do I fix CVE-2022-29898?
No fix has been published for CVE-2022-29898 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-29898 being exploited?
There is no known exploitation of CVE-2022-29898 in the wild and no public exploit code.
Other vulnerabilities in PHOENIX CONTACT RAD-ISM-900-EN-BD
Sources
Also known as GHSA-gg9m-7hf2-hmp9.