Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-29898

Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of the firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PHOENIX CONTACT RAD-ISM-900-EN-BD/B

  • All Versionsaffected

PHOENIX CONTACT RAD-ISM-900-EN-BD

  • All Versionsaffected

PHOENIX CONTACT RAD-ISM-900-EN-BD-BUS

  • All Versionsaffected

References