Skip to content
OpenAdvisories
Critical ICSA-22-179-06 5 CVEs

Motorola Solutions ACE1000

Published Jun 28, 2022 · Updated Jun 28, 2022

Vendor: Motorola Solutions Product: ACE1000

Summary

Successful exploitation of these vulnerabilities could allow an attacker to manipulate the RTU configuration, cause a denial-of-service condition, or achieve remote code execution.

Vulnerabilities 5

  • Critical 9.8
    CVE-2022-30271

    The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as …

  • Unscored —
    CVE-2022-30269

    Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installatio…

  • Unscored —
    CVE-2022-30270

    The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This i…

  • Unscored —
    CVE-2022-30272

    The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or…

  • Unscored —
    CVE-2022-30274

    The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio g…

Revision history

  1. #1

    Publication Date

References