1. Home
  2. CVE Database
  3. CVE-2022-29958
CRITICAL · 9.8

CVE-2022-29958

JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to ...

Vulnerability Description

JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. Control logic is downloaded to the PLC on a block-by-block basis with a given memory address and a blob of machine code. The logic that is downloaded to the PLC is not cryptographically authenticated, allowing an attacker to execute arbitrary machine code on the PLC's CPU module in the context of the runtime. In the case of the PC10G-CPU, and likely for other CPU modules of the TOYOPUC family, a processor without MPU or MMU is used and this no memory protection or privilege-separation capabilities are available, giving an attacker full control over the CPU.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
JtektPc10G-Cpu Tcc-6353 Firmware-
JtektPc10G-Cpu Tcc-6353-
JtektPc10Ge Tcc-6464 Firmware-
JtektPc10Ge Tcc-6464-
JtektPc10P Tcc-6372 Firmware-
JtektPc10P Tcc-6372-
JtektPc10P-Dp Tcc-6726 Firmware-
JtektPc10P-Dp Tcc-6726-
JtektPc10P-Dp-Io Tcc-6752 Firmware-
JtektPc10P-Dp-Io Tcc-6752-
JtektPc10B-P Tcc-6373 Firmware-
JtektPc10B-P Tcc-6373-
JtektPc10B Tcc-1021 Firmware-
JtektPc10B Tcc-1021-
JtektPc10E Tcc-4737 Firmware-
JtektPc10E Tcc-4737-
JtektPc10El Tcc-4747 Firmware-
JtektPc10El Tcc-4747-
JtektPlus Cpu Tcc-6740 Firmware-
JtektPlus Cpu Tcc-6740-

Related Weaknesses (CWE)

CWE-345

References

FAQ

What is CVE-2022-29958?

CVE-2022-29958 is a vulnerability with a CVSS score of 9.8 (CRITICAL). JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to ...

How severe is CVE-2022-29958?

CVE-2022-29958 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-29958?

Check the references section above for vendor advisories and patch information. Affected products include: Jtekt Pc10G-Cpu Tcc-6353 Firmware, Jtekt Pc10G-Cpu Tcc-6353, Jtekt Pc10Ge Tcc-6464 Firmware, Jtekt Pc10Ge Tcc-6464, Jtekt Pc10P Tcc-6372 Firmware.