Vulnerability · Published May 11, 2022 · Assigned by CERTVDE
CVE-2022-29898Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT
Critical 9.1
In plain English
A critical-severity security flaw in RAD-ISM-900-EN-BD from PHOENIX CONTACT. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 48.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHOENIX CONTACT | RAD-ISM-900-EN-BD/B | All Versions |
| PHOENIX CONTACT | RAD-ISM-900-EN-BD | All Versions |
| PHOENIX CONTACT | RAD-ISM-900-EN-BD-BUS | All Versions |
Weakness: CWE-354 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://cert.vde.com/en/advisories/VDE-2022-018/ x_refsource_CONFIRM