Multiple vulnerabilities in Emerson PACSystem and Fanuc
| Risk | Low |
| Patch available | NO |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2022-30263 CVE-2022-30265 CVE-2022-30268 CVE-2022-30266 |
| CWE-ID | CWE-319 CWE-494 CWE-345 CWE-522 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
PAC Machine Edition Server applications / Other server solutions PACSystem RXi Server applications / Other server solutions PACSystem RX3i Server applications / Other server solutions PACSystem RSTi-EP Server applications / Other server solutions PACSystem VersaMax Server applications / Other server solutions Fanuc VersaMax Server applications / Other server solutions |
| Vendor | Emerson |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) Cleartext transmission of sensitive information
EUVDB-ID: #VU91265
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-30263
CWE-ID:
CWE-319 - Cleartext Transmission of Sensitive Information
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. An attacker with physical access can intercept and modify an active connection to gain access to sensitive data.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsPAC Machine Edition: All versions
PACSystem RXi: All versions
PACSystem RX3i: All versions
PACSystem RSTi-EP: All versions
PACSystem VersaMax: All versions
Fanuc VersaMax: All versions
External linkshttp://www.cisa.gov/news-events/ics-advisories/icsa-24-158-01
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Download of code without integrity check
EUVDB-ID: #VU91268
Risk: Low
CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-30265
CWE-ID:
CWE-494 - Download of Code Without Integrity Check
Exploit availability: No
DescriptionThe vulnerability allows a local user to compromise the affected system
The vulnerability exists due to the control logic downloaded to the PLC is not cryptographically authenticated. A local administrator can gain access to the the target system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsPAC Machine Edition: All versions
PACSystem RX3i: All versions
PACSystem RSTi-EP: All versions
PACSystem VersaMax: All versions
External linkshttp://www.cisa.gov/news-events/ics-advisories/icsa-24-158-01
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Insufficient verification of data authenticity
EUVDB-ID: #VU91271
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-30268
CWE-ID:
CWE-345 - Insufficient Verification of Data Authenticity
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to insufficient verification of data authenticity in the Winloader utility. An authenticated attacker can push malicious firmware images to the controller and execute arbitrary code on the target system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsPACSystem RXi: All versions
PACSystem RX3i: All versions
PACSystem RSTi-EP: All versions
Fanuc VersaMax: All versions
External linkshttp://www.cisa.gov/news-events/ics-advisories/icsa-24-158-01
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Insufficiently protected credentials
EUVDB-ID: #VU91272
Risk: Low
CVSSv3.1: 3.7 [CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-30266
CWE-ID:
CWE-522 - Insufficiently Protected Credentials
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain access to sensitive information.
The vulnerability exists due to the affected product uses a simple hashing scheme by client-side JavaScript. An attacker with physical access can gain access to sensitive information on the system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsPACSystem RXi: All versions
PACSystem RSTi-EP: All versions
Fanuc VersaMax: All versions
External linkshttp://www.cisa.gov/news-events/ics-advisories/icsa-24-158-01
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
