PT-2022-20033 · Honeywell · Honeywell Alerton Visual Logic

Published 2022-07-15 · Updated 2022-07-22 · CVE-2022-30243

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Visual Logic through 2022-05-04

Description The issue allows unauthenticated programming writes from remote users, enabling code to be stored on the controller and run without verification. A malicious user can send a crafted packet to change or stop the program, altering the controller's function without other users' knowledge. The program needs to be overwritten to restore the controller's original operational function.

Recommendations For Honeywell Alerton Visual Logic through 2022-05-04, overwrite the program to restore the controller's original operational function after any unauthorized programming changes. As a temporary workaround, consider restricting access to the controller to prevent malicious users from sending crafted packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2022-30243

Affected Products

Honeywell Alerton Visual Logic

References · 7

• https://osv.dev/vulnerability/CVE-2022-30243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30243 · Security Note
• https://honeywell.com/us/en/product-security · Vendor Advisory
• https://blog.scadafence.com · Note
• https://t.me/cibsecurity/46303 · Telegram Post
• ❌ https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities · Note, Deleted
• https://t.me/cvenotify/33637 · Telegram Post