PT-2022-3090 · Motorola · Motorola Moscad Toolbox

Daniel Dos Santos + 1 · Published 2022-06-22 · Updated 2024-02-14 · CVE-2022-30275

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Motorola MOSCAD Toolbox software through 2022-05-02

Description The issue concerns the use of a cleartext password in the Motorola MOSCAD Toolbox software. This password is stored in the wmdlcdrv.ini driver configuration file and is used for access control to MOSCAD/STS projects protected with the Legacy Password feature. An insecure CRC of the password is present in the project file and is validated against the password in the driver configuration file. The software utilizes an MDLC driver to communicate with MOSCAD/ACE RTUs for engineering purposes.

Recommendations For Motorola MOSCAD Toolbox software through 2022-05-02, consider disabling the use of the Legacy Password feature until a secure alternative is implemented. Restrict access to the wmdlcdrv.ini driver configuration file to minimize the risk of exploitation. Avoid using the cleartext password stored in this file for access control to MOSCAD/STS projects. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Using Hardcoded Credentials

Weakness Enumeration

CWE-312

CWE-798

Related Identifiers

BDU:2022-03760

CVE-2022-30275

Affected Products

Motorola Moscad Toolbox

References · 8

• https://osv.dev/vulnerability/CVE-2022-30275 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03760 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30275 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-179-05 · Note
• https://forescout.com/blog · Note
• https://t.me/cibsecurity/47051 · Telegram Post
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note