CVE-2022-30274

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-26 · updated 2026-06-17
Weakness: CWE-798

Description

The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded client. Credentials for accessing this gateway are stored after being encrypted with the Tiny Encryption Algorithm (TEA) in ECB mode using a hardcoded key. Similarly, the ACE1000 RTU can route MDLC traffic over Extended Command and Management Protocol (XCMP) and Network Layer (XNL) networks via the MDLC driver. Authentication to the XNL port is protected by TEA in ECB mode using a hardcoded key.

Affected products

Motorola Ace1000 Firmware: all versions

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06
https://www.forescout.com/blog/
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-06
https://www.forescout.com/blog/

Get alerted when CVE-2022-30274 or the next vulnerability affects your stack