Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experion LX Control Data Access (CDA) EpicMo protocol with unauthenticated functionality issue. The affected components are characterized as: Honeywell Control Data Access (CDA) EpicMo (55565/TCP). The potential impact is: Firmware manipulation, Denial of service. The Honeywell Experion LX Distributed Control System (DCS) utilizes the Control Data Access (CDA) EpicMo protocol (55565/TCP) for device diagnostics and maintenance purposes. This protocol does not have any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality. There is no authentication functionality on the protocol in question. An attacker capable of invoking the protocols' functionalities could issue firmware download commands potentially allowing for firmware manipulation and reboot devices causing denial of service.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-07 | Mitigation Third Party Advisory US Government Resource |
| https://www.forescout.com/blog/ | Not Applicable |
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-07 | Mitigation Third Party Advisory US Government Resource |
| https://www.forescout.com/blog/ | Not Applicable |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-07 - Mitigation, Third Party Advisory, US Government Resource | |
| References | () https://www.forescout.com/blog/ - Not Applicable |
Information
Published : 2022-08-31 16:15
Updated : 2024-11-21 07:02
NVD link : CVE-2022-30317
Mitre link : CVE-2022-30317
CVE.ORG link : CVE-2022-30317
JSON object : View
Products Affected
honeywell
- experion_lx
- experion_lx_firmware
CWE
CWE-306
Missing Authentication for Critical Function