CVE-2022-29951 Missing authorization in n/a
Attackers can modify PLC configurations and control operations because the CMPLink/TCP protocol lacks authentication mechanisms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29951?
CVE-2022-29951 is a critical missing authorization vulnerability in n/a, published on 26 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing configuration settings. This protocol does not have any authentication features, allowing any attacker capable of communicating with the port in question to invoke (a subset of) desired functionality.
Weakness: CWE-306
Which versions are affected by CVE-2022-29951?
It affects 17 products.
Products include Jtekt Nano 10gx Tuc-1157 Firmware, Jtekt Nano Cpu Tuc-6941 Firmware, Jtekt Pc10b-P Tcc-6373 Firmware, Jtekt Pc10b Tcc-1021 Firmware, Jtekt Pc10e Tcc-4737 Firmware, Jtekt Pc10el Tcc-4747 Firmware and 11 more.
How do I fix CVE-2022-29951?
No fix has been published for CVE-2022-29951 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-29951 being exploited?
There is no known exploitation of CVE-2022-29951 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-c7f2-2769-qw43.