Vulnerability in Schneider-Electric Tburjr900
CVE-2013-2782
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.013 (68.6th percentile) — read the EPSS interpretation.
Affected products
- Schneider-electric Tburjr900 — versions 00002dh0, 00002eh0, 01002dh0
- Schneider-electric Tburjr900_firmware — versions 3.6.0, 3.6.1, 3.6.2
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)