Lucene search
HistoryDec 02, 2022 - 8:15 p.m.
CVE-2022-2641
horner automation
rcc 972
firmware vulnerability
static encryption key
unauthorized changes
arbitrary code
denial-of-service
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.3%
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
Affected configurations
Node
hornerautomationrcc972_firmwareMatch15.40
hornerautomationrcc972Match-
Related
cve
cve
CVE-2022-2641
2022-12-02 20:15:13
cvelist
cvelist
CVE-2022-2641
2022-12-01 00:00:00
prion
prion
Race condition
2022-12-02 20:15:00
ics
ics
Horner Automation Remote Compact Controller
2022-12-01 12:00:00
thn
thn
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.3%
Related for NVD:CVE-2022-2641