Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-30270

The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This interface is used for remote maintenance and for SFTP file-transfer operations that are part of engineering software functionality. Access to this interface is controlled by 5 preconfigured accounts (root, abuilder, acelogin, cappl, ace), all of which come with default credentials. Although the ACE1000 documentation mentions the root, abuilder and acelogin accounts and instructs users to change the default credentials, the cappl and ace accounts remain undocumented and thus are unlikely to have their credentials changed.

Published

2022-07-26T23:15:08.137

Last Modified

2024-11-21T07:02:28.067

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	motorola	ace1000_firmware	-	Yes
Hardware	motorola	ace1000	-	No

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06 Mitigation, Third Party Advisory, US Government Resource ([email protected])
https://www.forescout.com/blog/ Not Applicable ([email protected])
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06 Mitigation, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://www.forescout.com/blog/ Not Applicable (af854a3a-2127-422b-91ae-364da2661108)