ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497

9.3 CVSS

Vulnerability Description

Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26131

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

National Motor Freight Traffic Association, Inc. (NMFTA) researcher Ben Gardiner, NMFTA motor freight carrier members, and Assured Information Security researchers Chris Poore, Dan Salloum, and Eric Thayer reported this vulnerability to CISA.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01

More from Power Line Communications

View All →

CVE-2022-25922

ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497

Medium 6.1

Affected Vendor

Power Line Communications

View all reports →

Affected Software

PLC4TRUCKS

Vulnerable Versions:

J2497

Timeline

Official Publish: March 7th, 2022

Last Modified: April 16th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Weaknesses (CWE)

CWE-1319

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.