PT-2022-20034 · Honeywell · Honeywell Alerton Ascent Control Module

Published 2022-07-15 · Updated 2022-07-22 · CVE-2022-30244

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04

Description The issue allows unauthenticated programming writes from remote users, enabling code to be stored on the controller and run without verification. A malicious user can send a crafted packet to change or stop the program, altering the controller's function without other users' knowledge. The program needs to be overwritten to restore the controller's original operational function.

Recommendations For Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04, consider overwriting the program to restore the controller's original operational function after any unauthorized programming changes. As a temporary workaround, restrict access to the controller to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2022-30244

Affected Products

Honeywell Alerton Ascent Control Module

References · 7

• https://osv.dev/vulnerability/CVE-2022-30244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30244 · Security Note
• https://honeywell.com/us/en/product-security · Vendor Advisory
• https://t.me/cvenotify/33635 · Telegram Post
• https://blog.scadafence.com · Note
• https://t.me/cibsecurity/46299 · Telegram Post
• ❌ https://github.com/scadafence/Honeywell-Alerton-Vulnerabilities · Note, Deleted