CVE-2022-30317 Missing authorization in n/a
Unauthenticated EpicMo protocol allows attackers to manipulate firmware or cause denial of service in Honeywell Experion LX systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-30317?
CVE-2022-30317 is a critical missing authorization vulnerability in n/a, published on 31 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experion LX Control Data Access (CDA) EpicMo protocol with unauthenticated functionality issue. The affected components are characterized as: Honeywell Control Data Access (CDA) EpicMo (55565/TCP). The potential impact is: Firmware manipulation, Denial of service. The Honeywell Experion LX Distributed Control System (DCS) utilizes the Control Data Access (CDA) EpicMo protocol (55565/TCP) for device diagnostics and maintenance purposes. This protocol does not have any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality. There is no authentication functionality on the protocol in question. An attacker capable of invoking the protocols' functionalities could issue firmware download commands potentially allowing for firmware manipulation and reboot devices causing denial of service.
Weakness: CWE-306
Which versions are affected by CVE-2022-30317?
It affects 1 product.
Products include Honeywell Experion Lx Firmware.
How do I fix CVE-2022-30317?
No fix has been published for CVE-2022-30317 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-30317 being exploited?
There is no known exploitation of CVE-2022-30317 in the wild and no public exploit code.
Sources
Also known as GHSA-p77h-46hr-84ff.