https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:48:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-03848 bdu:2022-03848 https://cve.radiocsirt.org/vuln/bdu:2022-03848 https://cve.radiocsirt.org/vuln/euvd-2026-16430 EUVD-2026-16430 https://cve.radiocsirt.org/vuln/euvd-2026-16430 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30262 <p>The Emerson ControlWave &#39;Next Generation&#39; RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.</p> <p>The Emerson ControlWave &#39;Next Generation&#39; RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30262 https://cve.radiocsirt.org/vuln/ghsa-g3xq-mfm7-v29h <p>The Emerson ControlWave &#39;Next Generation&#39; RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.</p> <p>The Emerson ControlWave &#39;Next Generation&#39; RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.</p> https://cve.radiocsirt.org/vuln/ghsa-g3xq-mfm7-v29h https://cve.radiocsirt.org/vuln/gsd-2022-30262 gsd-2022-30262 https://cve.radiocsirt.org/vuln/gsd-2022-30262 https://cve.radiocsirt.org/vuln/icsa-22-221-02 <p>Emerson ControlWave firmware images are not signed and only rely on insecure checksums for regular integrity checks. This could allow an attacker to push malicious firmware, remote code execution, or a denial-of-service condition.CVE-2022-30262 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).</p> <p>Emerson ControlWave firmware images are not signed and only rely on insecure checksums for regular integrity checks. This could allow an attacker to push malicious firmware, remote code execution, or a denial-of-service condition.CVE-2022-30262 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).</p> https://cve.radiocsirt.org/vuln/icsa-22-221-02