PT-2022-3089 · Motorola · Motorola Moscad+1

Daniel Dos Santos + 1 · Published 2022-06-22 · Updated 2024-02-13 · CVE-2022-30276

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Motorola MOSCAD and ACE line of RTUs through 2022-05-02

Description The issue concerns the omission of an authentication requirement in the Motorola MOSCAD and ACE line of RTUs. These devices feature IP Gateway modules that allow for communication between Motorola Data Link Communication (MDLC) networks and TCP/IP networks using the proprietary IPGW protocol on port 5001/TCP. This protocol lacks authentication features, enabling any attacker who can communicate with the port to invoke desired functionality.

Recommendations For Motorola MOSCAD and ACE line of RTUs through 2022-05-02, consider disabling the IPGW protocol on port 5001/TCP as a temporary workaround until a patch is available. Restrict access to the IP Gateway modules to minimize the risk of exploitation. Avoid using the IPGW protocol until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2022-03759

CVE-2022-30276

Affected Products

Motorola Ace

Motorola Moscad

References · 9

• https://bdu.fstec.ru/vul/2022-03759 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30276 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://t.me/cvenotify/71254 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-179-04 · Note
• https://forescout.com/blog · Note
• https://t.me/cibsecurity/47041 · Telegram Post
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note
• https://t.me/cvenotify/34433 · Telegram Post