Remote Configuration Vulnerability in Honeywell Alerton Ascent Control Module

CVE-2022-30242

What is CVE-2022-30242?

The Honeywell Alerton Ascent Control Module (ACM) is susceptible to a vulnerability that allows unauthenticated remote users to make configuration changes. This exploit enables attackers to send specifically crafted packets that alter the configuration settings of the module without the awareness of legitimate users. Significantly, these unauthorized changes are not reflected in the User Interface, leading to discrepancies between the displayed settings and the actual operational configuration. After such alterations, restoring the system to its original state requires either physical or remote access, depending on the changes made, which could pose severe operational risks.

References