Vulnerability · Published May 11, 2022 · Assigned by CERTVDE
CVE-2022-29897Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
Critical 9.1
In plain English
A critical-severity improper input validation in RAD-ISM-900-EN-BD from PHOENIX CONTACT. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)1.4%top 28.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the traceroute utility integrated in the WebUI to execute arbitrary code with root privileges on the OS due to an improper input validation in all versions of the firmware.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHOENIX CONTACT | RAD-ISM-900-EN-BD/B | All Versions |
| PHOENIX CONTACT | RAD-ISM-900-EN-BD | All Versions |
| PHOENIX CONTACT | RAD-ISM-900-EN-BD-BUS | All Versions |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://cert.vde.com/en/advisories/VDE-2022-018/ x_refsource_CONFIRM