MEDIUM🇵🇱 Wersja polska

CVE-2022-25922

CVSS 6.1v3.1pub. 2022-03-10upd. 2024-11-21

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Hegemonelectronics Plc4trucks

    HW
    Hegemonelectronics
    all versions

  • Hegemonelectronics Plc4trucks Firmware

    OS
    Hegemonelectronics
    j2497
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-26131CRITICAL9.3PL ✓same product

Podatność PLC4TRUCKS J2497 na zdalne sygnały RF w przyczepach