{"id":"CVE-2022-30269","aliases":["EUVD-2022-52224","GHSA-p4gj-rmqv-7h27"],"status":"published","title":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom...","description":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00471,"percentile":0.41067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-345"],"published":"2022-07-26T22:11:30Z","modified":"2026-06-17T04:43:21Z","products":[{"vendor":"motorola","product":"ace1000_firmware"}],"references":[{"url":"https://www.forescout.com/blog/","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30269"},{"url":"https://github.com/advisories/GHSA-p4gj-rmqv-7h27"}],"sources":{"cve":[{"id":"CVE-2022-30269","description":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.","status":"published","published":"2022-07-26T22:11:30Z","modified":"2024-08-03T06:48:34.866Z","updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-52224","description":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.","status":"published","published":"2022-07-26T22:11:30Z","modified":"2024-08-03T06:48:34Z","updated_at":"2026-11-03T03:25:36.95433Z"}],"ghsa":[{"id":"GHSA-p4gj-rmqv-7h27","title":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom...","description":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.","status":"published","published":"2022-07-27T00:00:31Z","modified":"2023-01-27T05:07:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:43:11.926628Z"}],"nvd":[{"id":"CVE-2022-30269","description":"Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.","status":"published","published":"2022-07-26T23:15:08.097Z","modified":"2026-06-17T04:43:21.593Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-345"],"updated_at":"2026-11-02T14:07:24.037422Z"}]}}