CVE:CVE-2022-30312
CNNVD:CNNVD-202208-4458
Honeywell Trend Controls IQ Series that utilize Inter-Controller (IC) protocol是美国Honeywell公司的一种楼宇自动化控制器。
Honeywell Trend Controls IQ Series that utilize Inter-Controller (IC) protocol存在安全漏洞，该漏洞源于该协议使用以明文形式传输的4位身份验证PIN，当利用不支持的传统版本的控制器时，允许用户名和密码以明文传输。这可能允许具有本地OT网络访问权限的攻击者获取这些凭据。
solution:Upgrade honeywell trend_iq412_firmware to a higher version than *; Upgrade honeywell trend_iq411_firmware to a higher version than *; Upgrade honeywell trend_iq422_firmware to a higher version than *; Upgrade honeywell trend_iq4nc_firmware to a higher version than *; Upgrade honeywell trend_iq4e_firmware to a higher version than *