PT-2018-14284 · Telecrane · Telecrane F25 Series Radio Controls

Akira Urano + 6 · Published 2018-10-24 · Updated 2020-09-18 · CVE-2018-17935

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Telecrane F25 Series Radio Controls versions prior to 00.0A

Description The issue concerns the use of fixed codes in the Telecrane F25 Series Radio Controls, which can be reproduced by sniffing and re-transmission. This allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.

Recommendations For versions prior to 00.0A, update to version 00.0A or later to resolve the issue.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2018-17935

ZDI-18-1315

Affected Products

Telecrane F25 Series Radio Controls

References · 5

• https://osv.dev/vulnerability/CVE-2018-17935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17935 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1315 · Security Note
• http://securityfocus.com/bid/105732 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-296-03 · Note