# CVE-2022-30790: Das U-Boot buffer overflow in version 2022.01

Source: https://junglewise.ai/threats/cve-2022-30790-das-u-boot-buffer-overflow-in-version-2022-01  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2022-06-08. Updated: 2026-05-12  
License: CC BY 4.0 with a link back

CVE-2022-30790 · Severity: high · CVSS 7.8 · Published 2022-06-08

Das U-Boot is a widely used open-source bootloader for embedded devices, such as routers, industrial controllers, and IoT hardware. A security flaw has been identified that could allow a local attacker to cause a system crash or potentially execute unauthorized code. This could lead to a complete loss of device availability or unauthorized access to sensitive data stored on the hardware.

Technologies: [Denx U-Boot](https://junglewise.ai/threats/technologies/u-boot), [Siemens RUGGEDCOM ROX II](https://junglewise.ai/threats/technologies/ruggedcom-rox-ii). Vendors: [Denx](https://junglewise.ai/threats/vendors/denx), [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2022-30790 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2022-30790 being exploited in the wild.

**How severe is CVE-2022-30790?** High severity, with a CVSS score of 7.8, published 8 June 2022.

**Which products and versions are affected?** Siemens RUGGEDCOM ROX II All versions < V2.17.1.

**Is there a fix for CVE-2022-30790?** A patch was published on 2025-05-01: Debian LTS security update released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2022-30790 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2022-30790?** Check whether you run Denx U-Boot or Siemens RUGGEDCOM ROX II at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A buffer overflow vulnerability exists in Das U-Boot version 2022.01 due to an out-of-bounds write (CWE-787). The flaw is distinct from CVE-2022-30552. An attacker with local access and low privileges can exploit this vulnerability to overwrite memory, potentially achieving arbitrary code execution or causing a system crash (denial-of-service). The vulnerability has been observed in downstream implementations, such as Siemens RUGGEDCOM ROX II devices. Patches are available in newer versions of U-Boot and vendor-specific firmware updates like RUGGEDCOM ROX V2.17.1.

## Affected products

- Das U-Boot U-Boot 2022.01
- Siemens Corproation RUGGEDCOM ROX II family All versions < V2.17.1

## Timeline

- 2022-06-03: disclosed: Technical advisory published by NCC Group
- 2022-06-08: advisory: NVD published CVE-2022-30790
- 2025-05-01: patched: Debian LTS security update released
- 2026-05-12: patched: Siemens released advisory SSA-577017 with fixes for RUGGEDCOM ROX II

## References

- [https://github.com/u-boot/u-boot/tags](https://github.com/u-boot/u-boot/tags)
- [https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/](https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/)
- [https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html)
- [https://cert-portal.siemens.com/productcert/html/ssa-577017.html](https://cert-portal.siemens.com/productcert/html/ssa-577017.html)

## Related threats

- [Denx U-Boot integer overflow in ext4fs_get_bgdtable](https://junglewise.ai/threats/cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable)
- [Denx U-Boot integer overflow in ZFS filesystem support](https://junglewise.ai/threats/cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support)
- [Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and…](https://junglewise.ai/threats/cve-2025-24857-improper-access-control-for-volatile-memory-containing-boot-code)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56840-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)
- [A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All…](https://junglewise.ai/threats/cve-2024-56839-a-vulnerability-has-been-identified-in-ruggedcom-rox-mx5000-all)