Vulnerability · Published Mar 7, 2022 · Assigned by icscert
CVE-2022-26131ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497
Critical 9.3
In plain English
A critical-severity security flaw in PLC4TRUCKS from Power Line Communications. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)9.3Critical
Exploit odds (30 days)1.3%top 28.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Power Line Communications | PLC4TRUCKS | J2497 |
Weakness: CWE-1319 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01 x_refsource_CONFIRM