PT-2015-3804 · Ge Digital Energy · Ge Digital Energy Hydran M2

David Formby + 2 · Published 2015-03-14 · Updated 2025-11-03 · CVE-2014-5409

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions GE Digital Energy Hydran M2 versions before 94450214LFMT100SEM-L.R3-CL

Description The issue concerns the generation of random values for TCP Initial Sequence Numbers (ISNs) in the Ethernet card. Specifically, it does not properly generate these values, making it easier for remote attackers to spoof packets by predicting the ISNs.

Recommendations For versions before 94450214LFMT100SEM-L.R3-CL, update to version 94450214LFMT100SEM-L.R3-CL or later to resolve the issue.

Fix

Weakness Enumeration

CWE-343

Related Identifiers

CVE-2014-5409

Affected Products

Ge Digital Energy Hydran M2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-5409 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-041-02.json · Note
• http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101 · Note
• https://t.me/cveNotify/141400 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-15-041-02 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-041-02 · Note