Motorola Solutions MDLC 4.83.001
Approved changes feed: RSS · Atom
cpe:2.3:a:motorolasolutions:mdlc:4.83.001:*:*:*:*:*:*:*
part: a version: 4.83.001 update: *
| Vendor | Motorolasolutions (9d5d29fb-e48b-5641-b040-9d6cd3395954) |
|---|---|
| Product | Mdlc (fcef1640-d2d1-57d8-93ef-0dda4bb4ddee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30275 |
vulnerable | 2026-06-08 05:43:37.811003 |
Details available
The Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It utilizes an MDLC driver to communicate with MOSCAD/ACE RTUs for engineering purposes. Access to these communications is protected by a password stored in cleartext in the wmdlcdrv.ini driver configuration file. In addition, this password is used for access control to MOSCAD/STS projects protected with the Legacy Password feature. In this case, an insecure CRC of the password is present in the project file: this CRC is validated against the password in the driver configuration file.
Published: 2022-07-26T21:21:46.000Z
Updated: 2024-08-03T06:48:34.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30273 |
vulnerable | 2026-06-08 05:43:37.809996 |
Details available
The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.
Published: 2022-07-26T21:21:34.000Z
Updated: 2024-08-03T06:48:34.760Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.