What’s Vulnerable › Vulnerabilities

CVE-2022-28223

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-30 · updated 2026-06-17
• Weakness: CWE-434

Description

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.

Affected products

• Tekon Kio-1M Firmware: through 2022-03-30
• Tekon Kio-2M Firmware: through 2022-03-30
• Tekon Kio-2Md Firmware: through 2022-03-30
• Tekon Kio-2Mrs Firmware: through 2022-03-30
• Tekon Kio-2Ms Firmware: through 2022-03-30
• Tekon Kio-8(4) Firmware: through 2022-03-30
• Tekon Kio-8(4)L Firmware: through 2022-03-30
• Tekon Kio Firmware: through 2022-03-30

References

• https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38
• https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38

Get alerted when CVE-2022-28223 or the next vulnerability affects your stack