Execution with Unnecessary Privileges Vulnerability in Moxa's ARM-Based Computers
CVE-2022-3088

7.8HIGH

Key Information:

Vendor

Moxa
Status
Uc-8100a-me-t System Imaage
Uc-2100 System Image
Uc-2100-w System Image
Uc-3100 System Image
Vendor
CVE Published:
28 November 2022

What is CVE-2022-3088?

An execution with unnecessary privileges vulnerability in Moxa's ARM-based systems allows attackers with user-level access to elevate their privileges to root level. This could potentially lead to unauthorized control over the affected devices. The vulnerability spans multiple versions across various Moxa products, underscoring the importance of updating to secure software versions to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AIG-300 System Image 1.0 <= 1.4

DA-662C-16-LX (GLB) System Image 1.0.2 <= 1.1.2

UC-2100 System Image 1.0 <= 1.12

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

En Garde ICSRange research team reported this vulnerability to CISA.
JSON
.