[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI4QxmVR3aapctZggLbOYnD_TRpvS1HVoZzCvnMkXRxo":3,"g5a-ex:motorola\u002Face1000_firmware@*":66,"g5a-family:motorola\u002Face1000_firmware":68},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":43,"seoMetadata":44,"meta":63},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"motorola","ace1000_firmware",0,5,"2022-07-26",[],"Ace1000 Firmware by Motorola is a technology product and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,28,32,38],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2022-30271","The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as \u002Fetc\u002Finit.d\u002Fsshd_service) only generate a new key if no private-key file exists. Thus, this hardcoded key is likely to be used by default.",9.8,"v3.1","Critical",false,0.01057,{"cveId":25,"description":26,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":27},"CVE-2022-30270","The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22\u002FTCP. This interface is used for remote maintenance and for SFTP file-transfer operations that are part of engineering software functionality. Access to this interface is controlled by 5 preconfigured accounts (root, abuilder, acelogin, cappl, ace), all of which come with default credentials. Although the ACE1000 documentation mentions the root, abuilder and acelogin accounts and instructs users to change the default credentials, the cappl and ace accounts remain undocumented and thus are unlikely to have their credentials changed.",0.00929,{"cveId":29,"description":30,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":31},"CVE-2022-30274","The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded client. Credentials for accessing this gateway are stored after being encrypted with the Tiny Encryption Algorithm (TEA) in ECB mode using a hardcoded key. Similarly, the ACE1000 RTU can route MDLC traffic over Extended Command and Management Protocol (XCMP) and Network Layer (XNL) networks via the MDLC driver. Authentication to the XNL port is protected by TEA in ECB mode using a hardcoded key.",0.00658,{"cveId":33,"description":34,"publishedDate":11,"cvssScore":35,"cvssVersion":20,"severity":36,"isKev":22,"epssScore":37},"CVE-2022-30269","Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX\u002FDAT\u002FAPP\u002FCRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP\u002FSSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.",8.8,"High",0.00471,{"cveId":39,"description":40,"publishedDate":11,"cvssScore":41,"cvssVersion":20,"severity":36,"isKev":22,"epssScore":42},"CVE-2022-30272","The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performing firmware updates. In case of the Easy Configurator, firmware updates are performed through access to the Web UI where file system, kernel, package, bundle, or application images can be installed. Firmware updates for the Front End Processor (FEP) module are performed via access to the SSH interface (22\u002FTCP), where a .hex file image is transferred and a bootloader script invoked. File system, kernel, package, and bundle updates are supplied as RPM (RPM Package Manager) files while FEP updates are supplied as S-rec files. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.",7.2,0.00468,[],{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Ace1000 Firmware by Motorola - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ace1000 Firmware by Motorola with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ace1000 Firmware vulnerabilities, Ace1000 Firmware security, Ace1000 Firmware CVE, Motorola Ace1000 Firmware, Ace1000 Firmware threat intelligence, Motorola security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52,"manufacturer":53,"applicationCategory":57,"softwareVersion":58,"mainEntity":59},"https:\u002F\u002Fschema.org","SoftwareApplication","Ace1000 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmotorola\u002Face1000_firmware",{"@type":54,"name":55,"url":56},"Organization","Motorola","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmotorola","Security Software","Multiple versions",{"@type":60,"name":61,"description":62,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Ace1000 Firmware Security Vulnerabilities","Security vulnerabilities affecting Ace1000 Firmware by Motorola",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":64,"apiVersion":65},"2026-10-20T01:12:08.664Z","3.0",{"rows":67,"total":9,"capped":22,"failed":9},[],[]]