CVE-2022-25922

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

Score

CVSS 3.1 9.1 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-03-10

Last modified

2025-04-16

Weaknesses

CWE-306

Affected products

• Plc4trucks Firmware (Hegemonelectronics)
• Plc4trucks (Power Line Communications)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01