CVE-2022-30264 Path traversal in n/a
Attackers can read, write, or delete arbitrary files on Emerson ROC and FloBoss RTUs via insecure filesystem operations in the ROC protocol.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-30264?
CVE-2022-30264 is a critical path traversal vulnerability in n/a, published on 16 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.
Weakness: CWE-345
Which versions are affected by CVE-2022-30264?
It affects 5 products.
Products include Emerson Dl8000 Firmware, Emerson Fb3000 Rtu Firmware, Emerson Roc800l Firmware, Emerson Roc809 Firmware, Emerson Roc827 Firmware.
How do I fix CVE-2022-30264?
No fix has been published for CVE-2022-30264 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-30264 being exploited?
There is no known exploitation of CVE-2022-30264 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hr3f-j6vx-grx5.