PT-2017-19096 · Mirion Technologies · Rds-31 Itx+7

Publicado 2017-09-20 · Atualizado 2019-10-09 · CVE-2017-9649

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mirion Technologies DMC 3000 Transmitter Module version (affected versions not specified) iPam Transmitter f/DMC 2000 version (affected versions not specified) RDS-31 iTX and variants (including RSD31-AM Package) version (affected versions not specified) DRM-1/2 and variants (including Solar PWR Package) version (affected versions not specified) DRM and RDS Based Boundary Monitors version (affected versions not specified) External Transmitters version (affected versions not specified) Telepole II version (affected versions not specified) MESH Repeater (Telemetry Enabled Devices) version (affected versions not specified)

Description A Use of Hard-Coded Cryptographic Key issue was discovered in various Mirion Technologies devices. The issue involves an unchangeable, factory-set key included in the 900 MHz transmitter firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

CWE-321

Identificadores relacionados

CVE-2017-9649

Produtos afetados

Dmc 3000 Transmitter Module

Drm/Rds Based Boundary Monitors

Drm-1/2

External Transmitters

Mesh Repeater

Rds-31 Itx

Telepole Ii

Ipam Transmitter F/Dmc 2000

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9649 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 · Nota
• http://securityfocus.com/bid/100001 · Nota