CVE-2022-30318 Hardcoded credentials in n/a
Hardcoded root SSH credentials in Honeywell ControlEdge PLC/RTU firmware allow attackers to gain root access, execute code, and disrupt operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-30318?
CVE-2022-30318 is a critical vulnerability in n/a, published on 31 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of service. The Honeywell ControlEdge PLC and RTU product line exposes an SSH service on port 22/TCP. Login as root to this service is permitted and credentials for the root user are hardcoded without automatically changing them upon first commissioning. The credentials for the SSH service are hardcoded in the firmware. The credentials grant an attacker access to a root shell on the PLC/RTU, allowing for remote code execution, configuration manipulation and denial of service.
Weakness: CWE-798
Which versions are affected by CVE-2022-30318?
It affects 2 products.
Products include Honeywell Controledge Plc Firmware, Honeywell Controledge Rtu Firmware.
How do I fix CVE-2022-30318?
No fix has been published for CVE-2022-30318 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-30318 being exploited?
There is no known exploitation of CVE-2022-30318 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2jhj-7g8h-j3h6.