CVE:CVE-2022-28223
CNNVD:CNNVD-202203-2609
Tekon KIO是俄罗斯Tekon公司的一款控制器。
Tekon KIO 设备存在安全漏洞，该漏洞源于允许经过身份验证的管理员用户通过上传恶意 Lua 插件将权限提升到 root。
solution:Upgrade tekon kio_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-1m_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-2mrs_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-2m_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-2ms_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-2md_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-8(4)_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]; Upgrade tekon kio-8(4)l_firmware to a higher version than 2022-03-30,and avoid the version (,2022-03-30]