Detections
Analytics
ABB M2M Gateway Stack Overflow in embedded Linux Kernel (CVE-2022-4378)
high Tenable OT Security Plugin ID 503260
Synopsis
The remote OT asset is affected by a vulnerability.Description
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08
http://www.nessus.org/u?310ae51a
http://www.nessus.org/u?5c591d5b
https://bugzilla.redhat.com/show_bug.cgi?id=2152548
http://www.nessus.org/u?b9ff304f
Plugin Details
Severity: High
ID: 503260
Version: 1.1
Type: remote
Family: Tenable.ot
Published: 5/27/2025
Updated: 5/27/2025
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v3
Risk Factor: High
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/o:abb:sw_firmware, cpe:/o:abb:arm600_firmware
Required KB Items: Tenable.ot/ABB
Exploit Ease: No known exploits are available
Patch Publication Date: 1/5/2023
Vulnerability Publication Date: 1/5/2023
Reference Information
CVE: CVE-2022-4378