PT-2022-3091 · Motorola · Motorola Ace1000 Rtu

Daniel Dos Santos + 1 · Published 2022-06-22 · Updated 2022-08-02 · CVE-2022-30274

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Motorola ACE1000 RTU versions prior to 2022-05-02

Description The issue is related to the use of hardcoded credentials in the XRT LAN-to-radio gateway and XNL microcode software of the Motorola ACE1000 RTU. This allows a remote attacker to gain unauthorized access to protected information. The Motorola ACE1000 RTU uses ECB encryption unsafely, storing credentials encrypted with the Tiny Encryption Algorithm (TEA) in ECB mode using a hardcoded key. This affects communication with the XRT LAN-to-radio gateway and authentication to the XNL port.

Recommendations For Motorola ACE1000 RTU versions prior to 2022-05-02, consider disabling the use of hardcoded credentials for the XRT LAN-to-radio gateway and XNL port until a patch is available. Restrict access to the XNL port to minimize the risk of exploitation. Avoid using the hardcoded key for TEA encryption in ECB mode until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2022-03761

CVE-2022-30274

Affected Products

Motorola Ace1000 Rtu

References · 7

• https://bdu.fstec.ru/vul/2022-03761 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30274 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-179-06 · Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note
• https://forescout.com/blog · Note
• https://t.me/cibsecurity/47036 · Telegram Post