Trailer Power Line Communications (PLC) J2497
Advisory ansehen veröffentlicht 2022-03-04
Successful exploitation of these vulnerabilities could allow a nearby attacker to execute diagnostic functions in the trailer or light the trailer ABS fault telltale in a tractor. Please see the NMFTA disclosure letter at for more details.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-26131US | critical9.8 | — | ||
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals. | ||||
| CVE-2022-25922US | critical9.1OT erhöht | — | ||
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- MitigationPower Line Communications (PLC)
Change addresses dynamically on each tractor in response to detecting a transmitter on its current address.
- MitigationPower Line Communications (PLC)
Change addresses dynamically on each tractor in response to detecting a transmitter on its current address.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan