CVE-2022-25922CWE-306

ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497

Medium · published March 7, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01201 · 68.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-03-07T15:28Z
EPSS history
Timeline
  • 07 MAR 15:28Z
    ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497
    cvelistv5