PT-2015-3804 · Ge Digital Energy · Ge Digital Energy Hydran M2

David Formby + 2 · Publicado 2015-03-14 · Atualizado 2025-11-03 · CVE-2014-5409

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions GE Digital Energy Hydran M2 versions before 94450214LFMT100SEM-L.R3-CL

Description The issue concerns the generation of random values for TCP Initial Sequence Numbers (ISNs) in the Ethernet card. Specifically, it does not properly generate these values, making it easier for remote attackers to spoof packets by predicting the ISNs.

Recommendations For versions before 94450214LFMT100SEM-L.R3-CL, update to version 94450214LFMT100SEM-L.R3-CL or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-343

Identificadores relacionados

CVE-2014-5409

Produtos afetados

Ge Digital Energy Hydran M2

Referências · 6

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-041-02.json · Nota
• http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101 · Nota
• https://t.me/cveNotify/141400 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-15-041-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5409 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-041-02 · Nota