PT-2017-19096 · Mirion Technologies · Rds-31 Itx+7

Published 2017-09-20 · Updated 2019-10-09 · CVE-2017-9649

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mirion Technologies DMC 3000 Transmitter Module version (affected versions not specified) iPam Transmitter f/DMC 2000 version (affected versions not specified) RDS-31 iTX and variants (including RSD31-AM Package) version (affected versions not specified) DRM-1/2 and variants (including Solar PWR Package) version (affected versions not specified) DRM and RDS Based Boundary Monitors version (affected versions not specified) External Transmitters version (affected versions not specified) Telepole II version (affected versions not specified) MESH Repeater (Telemetry Enabled Devices) version (affected versions not specified)

Description A Use of Hard-Coded Cryptographic Key issue was discovered in various Mirion Technologies devices. The issue involves an unchangeable, factory-set key included in the 900 MHz transmitter firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

CVE-2017-9649

Affected Products

Dmc 3000 Transmitter Module

Drm/Rds Based Boundary Monitors

Drm-1/2

External Transmitters

Mesh Repeater

Rds-31 Itx

Telepole Ii

Ipam Transmitter F/Dmc 2000

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9649 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 · Note
• http://securityfocus.com/bid/100001 · Note