CVE-2022-30262

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity

published August 17, 2022

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2022-08-17T14:27Z
EPSS history
Timeline
  • 17 AUG 14:27Z
    The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity
    cvelistv5