PT-2022-18887 · Tekon · Tekon Kio

Published 2022-03-30 · Updated 2022-04-05 · CVE-2022-28223

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Tekon KIO devices through 2022-03-30

Description The issue allows an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.

Recommendations For Tekon KIO devices through 2022-03-30, consider restricting the ability to upload Lua plugins to prevent privilege escalation until a fix is available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-28223

Affected Products

Tekon Kio

References · 5

• 🔥 https://medium.com/@bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38 · Exploit
• https://osv.dev/vulnerability/CVE-2022-28223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28223 · Security Note
• https://t.me/cibsecurity/39869 · Telegram Post
• https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38 · Note