ZeroHour

CVE-2022-25922

CVSS 3.1
9.1 critical
EPSS
1%p66
Published
()
Modified
Description

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

Vendors
hegemonelectronics
Products
plc4trucks firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

In the news

No ingested article mentions this CVE yet.