Description
Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | delve | 1.7.2-1.0.1.module+el8.6.0+20703+24a110ad | ELSA-2022-17957 |
| Oracle Linux 8 | go-toolset | 1.17.11-1.module+el8.6.0+20703+24a110ad | ELSA-2022-17957 |
| Oracle Linux 8 | golang +6 | 1.17.11-1.0.1.module+el8.6.0+20703+24a110ad | ELSA-2022-17957 |
Advisories 2
- ELSA-2022-17957 Important: ol8addon security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 12, 2022
- ICSA-22-179-06 Motorola Solutions ACE1000 CISA ICS & IT advisories · Jun 28, 2022