CVE-2022-30264

moderate-risk
Published 2022-08-16

The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.

Do I need to act?

-
0.12% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (5)

Dl8000 Firmware
Roc809 Firmware
Roc800L Firmware
Fb3000 Rtu Firmware
Roc827 Firmware

Affected Vendors

Emerson

References (4)

Mitigation https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04
Third Party Advisory https://www.forescout.com/blog/
Mitigation https://www.cisa.gov/uscert/ics/advisories/icsa-22-223-04
Third Party Advisory https://www.forescout.com/blog/
45
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 1/34 · Minimal
Exposure 12/34 · Low