What’s Vulnerable › Vulnerabilities

CVE-2022-29951

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-07-26 · updated 2026-06-17
• Weakness: CWE-306

Description

JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing configuration settings. This protocol does not have any authentication features, allowing any attacker capable of communicating with the port in question to invoke (a subset of) desired functionality.

Affected products

• Jtekt Nano 10Gx Tuc-1157 Firmware: all versions
• Jtekt Nano Cpu Tuc-6941 Firmware: all versions
• Jtekt Pc10B-P Tcc-6373 Firmware: all versions
• Jtekt Pc10B Tcc-1021 Firmware: all versions
• Jtekt Pc10E Tcc-4737 Firmware: all versions
• Jtekt Pc10El Tcc-4747 Firmware: all versions
• Jtekt Pc10G-Cpu Tcc-6353 Firmware: all versions
• Jtekt Pc10Ge Tcc-6464 Firmware: all versions
• Jtekt Pc10P-Dp-Io Tcc-6752 Firmware: all versions
• Jtekt Pc10P-Dp Tcc-6726 Firmware: all versions
• Jtekt Pc10P Tcc-6372 Firmware: all versions
• Jtekt Pc10Pe-1616P Tcc-1102 Firmware: all versions
• Jtekt Pc10Pe Tcc-1101 Firmware: all versions
• Jtekt Pc3Jx-D Tcc-6902 Firmware: all versions
• Jtekt Pc3Jx Tcc-6901 Firmware: all versions
• Jtekt Pcdl Tkc-6688 Firmware: all versions
• Jtekt Plus Cpu Tcc-6740 Firmware: all versions

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-02
• https://www.forescout.com/blog/
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-02
• https://www.forescout.com/blog/

Get alerted when CVE-2022-29951 or the next vulnerability affects your stack