Auth bypass in Motorola Ace1000
CVE-2022-30270
The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This interface is used for remote maintenance and for SFTP file-transfer operations that are part of engineering software functionality. Access to this interface is controlled by 5 preconfigured accounts (root, abuilder, acelogin, cappl, ace), all of which come with default credentials. Although the ACE1000 documentation mentions the root, abuilder and acelogin accounts and instructs users to change the default credentials, the cappl and ace accounts remain undocumented and thus are unlikely to have their credentials changed.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.009 (58.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 58th percentile — 58.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: +0.000
Affected products
Weakness classification (CWE)
References
- www.forescout.com/blog/ (Not Applicable)
- www.cisa.gov/uscert/ics/advisories/icsa-22-179-06 (US Government Resource, Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2022-30270?
- CVE-2022-30270 is a critical-severity vulnerability in Motorola Ace1000, classified under Improper Authentication. CVSS score: 9.8/10. Published 2022-07-26.
- How severe is CVE-2022-30270?
- Critical severity. CVSS v3 base score is 9.8 out of 10.