VULNERABILITY INTELLIGENCE

CVE-2022-25922

CVSS score6.1 MEDIUM
EPSS probability1.20%
CISA KEVNot currently listed
Published2022-03-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-306
  • nvd@nist.gov: CWE-306

Primary references