PT-2022-3169 · Unknown · Pacsystems

Published 2022-06-22 · Updated 2022-06-22 · CVE-2022-30268

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PACsystems (affected versions not specified)

Description The issue is related to insufficient data authentication in the embedded software images of PACsystems programmable logic controllers. This can be exploited by a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2022-03849

CVE-2022-30268

Affected Products

Pacsystems

References · 3

• https://bdu.fstec.ru/vul/2022-03849 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note