Motorola Solutions ACE1000

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to manipulate the RTU configuration, cause a denial-of-service condition, or achieve remote code execution.

CVEs (5)

Remediations

• While individual remediation steps are specified, note all vulnerabilities listed above can be resolved by upgrading the ACE1000 to MC-EDGE intelligent RTU.
• CVE-2022-30271: To remediate, manually rotate the private key using the “ACE1000 SSH Key Rotation” process.
• For user guide and procedural information mentioned within this report, use the Contact Us form and select “Other” for Product Interest and request the manual for IoT products.
• CVE-2022-30270: To remediate, users should change their password manually. This process can be found in the ACE1000 user guide.
• CVE-2022-30274: Upgrade to MOTOTRBO Capacity Max.
• CVE-2022-30269: To remediate, use the “Secured Download and Installation for ACE1000” procedure.
• CVE-2022-30272: To remediate, use the “Secured Download and Installation for ACE1000” procedure.

Affected Vendors

Affected Products (1)

Affected Sectors

Multiple