CVE-2022-30270

The Motorola ACE1000 RTU through 2022-05-02 has default credentials

published July 26, 2022

CVSS
โ€”
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

๐Ÿšจ Default credentials are the hidden party crashers in the Motorola ACE1000 RTU! With SSH access on port 22, five preconfigured accounts are just waiting for someone to stroll right in. ๐Ÿ”ฅ Think of it like a party where nobody checked the guest list before letting people in. Those undocumented accounts are like uninvited guests, ready to help themselves to the snacks while everyone else is oblivious! An attacker could easily gain unauthorized access to sensitive engineering software functions, potentially altering or stealing critical data. With five accounts available, the risk of an unauthorized user wreaking havoc is absolutely devastating.

Put simply

Think of it like a party where nobody checked the guest list before letting people in. Those undocumented accounts are like uninvited guests, ready to help themselves to the snacks while everyone else is oblivious! The Motorola ACE1000 RTU has default accounts (root, abuilder, acelogin, cappl, ace) with default credentials that allow remote SSH access, putting sensitive operations at risk due to lack of proper security controls.

What to do

An attacker could easily gain unauthorized access to sensitive engineering software functions, potentially altering or stealing critical data. With five accounts available, the risk of an unauthorized user wreaking havoc is absolutely devastating. Change the default credentials for all accounts immediately, specifically focusing on those undocumented accounts (cappl and ace). Regularly review access logs and implement firewall rules to restrict unauthorized access. ๐Ÿ›ก๏ธ You've got this! Follow these remediation steps to secure your system, and you'll be a security hero in no time! ๐ŸŒŸ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00929 ยท 60.2th percentile
Published
2022-07-26T22:11Z
EPSS history
Timeline
  • 26 JUL 22:11Z
    The Motorola ACE1000 RTU through 2022-05-02 has default credentials
    cvelistv5