CVE-2022-30312

The CVE-2022-30312 issue affects Trend Controls IC protocol (Inter-Controller, 57612/UDP) and Honeywell Trend IQ Series controllers. A 4‑digit authentication PIN and optional credentials (0–30 chars) are transmitted in CLEARTEXT, enabling an attacker with local access to obtain credentials and po...

Honeywell Trend Controls Inter-Controller Protocol

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low attack complexity Vendor: Honeywell Equipment: Trend Controls IQ Series that utilize Inter-Controller IC protocol Vulnerability: Cleartext Transmission of Sensitive Information CISA is aware of a public report, known as “OT:ICEFALL” that details...