Honeywell Safety Manager up to 2022-05-06 missing authentication

Summaryinfo

A vulnerability marked as critical has been reported in Honeywell Safety Manager up to 2022-05-06. This affects an unknown function. This manipulation causes missing authentication. The identification of this vulnerability is CVE-2022-30313. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to change the configuration settings.

Detailsinfo

A vulnerability was found in Honeywell Safety Manager up to 2022-05-06. It has been declared as critical. Affected by this vulnerability is an unknown code. The manipulation with an unknown input leads to a missing authentication vulnerability. The CWE definition for the vulnerability is CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0051, there is a Honeywell Experion PKS Safety Manager multiple proprietary protocols with unauthenticated functionality issue. The affected components are characterized as: Honeywell Experion TCP (51000/TCP), Safety Builder (51010/TCP). The potential impact is: Manipulate controller state, Manipulate controller configuration, Manipulate controller logic, Manipulate controller files, Manipulate IO. The Honeywell Experion PKS Distributed Control System (DCS) Safety Manager utilizes several proprietary protocols for a wide variety of functionality, including process data acquisition, controller steering and configuration management. These protocols include: Experion TCP (51000/TCP) and Safety Builder (51010/TCP). None of these protocols have any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality. There is no authentication functionality on the protocols in question. An attacker capable of invoking the protocols' functionalities could achieve a wide range of adverse impacts, including (but not limited to), the following: for Experion TCP (51000/TCP): Issue IO manipulation commands, Issue file read/write commands; and for Safety Builder (51010/TCP): Issue controller start/stop commands, Issue logic download/upload commands, Issue file read commands, Issue system time change commands. A mitigating factor with regards to some, but not all, of the above functionality is that these require the Safety Manager physical keyswitch to be in the right position.

The weakness was shared 07/29/2022 as icsa-22-207-02. It is possible to read the advisory at cisa.gov. This vulnerability is known as CVE-2022-30313 since 05/06/2022. The technical details are unknown and an exploit is not publicly available.

It is possible to mitigate the problem by applying the configuration setting .

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Honeywell

Name

• Safety Manager

Version

• 2022-05-06

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion