EUVD-2022-52222

Malicious code in bioql PyPI...

CVE-2022-30262

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have n...

CVE-2022-30262

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have n...

CVE-2022-30262

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have n...

Design/Logic Flaw

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have n...

CVE-2022-30262

The CVE-2022-30262 entry concerns Emerson ControlWave ‘Next Generation’ RTUs (through 2022-05-02) with firmware updates transmitted over BSAP-IP. The vulnerability is insufficient verification of data authenticity: firmware images in CAB archives are not authenticated (no signing) and rely on ins...

CVE-2022-30262: Insufficient Verification of Data Authenticity

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have n...

PT-2022-3166

Name of the Vulnerable Software and Affected Versions ControlWave affected versions not specified Bristol Babcock 33xx affected versions not specified Description The issue is related to the implementation of the BSAP/IP protocol in the ControlWave and Bristol Babcock 33xx controllers, which is...

PT-2022-3165

Name of the Vulnerable Software and Affected Versions ControlWave affected versions not specified Bristol Babcock 33xx affected versions not specified Description The issue is related to the implementation of the BSAP/IP protocol in the ControlWave and Bristol Babcock 33xx controllers, which...

PT-2022-3164

Name of the Vulnerable Software and Affected Versions ControlWave and Bristol Babcock 33xx controllers affected versions not specified Description The issue is related to the implementation of the BSAP/IP protocol in the controllers, which uses flawed cryptographic algorithms. This could allow a...