Trailer Power Line Communications (PLC) J2497
view advisory published 2022-03-04
Successful exploitation of these vulnerabilities could allow a nearby attacker to execute diagnostic functions in the trailer or light the trailer ABS fault telltale in a tractor. Please see the NMFTA disclosure letter at for more details.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-26131US | critical9.8 | — | ||
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals. | ||||
| CVE-2022-25922US | critical9.1OT elevated | — | ||
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationPower Line Communications (PLC)
Change addresses dynamically on each tractor in response to detecting a transmitter on its current address.
- MitigationPower Line Communications (PLC)
Change addresses dynamically on each tractor in response to detecting a transmitter on its current address.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan