CVE-2022-25922

9.1 criticalEPSS 1.2%

Critical (9.1) in hegemonelectronics plc4trucks firmware. EPSS 1.2% chance of exploitation in the next 30 days.

Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2022-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hegemonelectronics:plc4trucks_firmware

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01
https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01

Check your stack JSON