Lucene search

[email protected]CVE-2013-2782

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2782

2022-10-0316:15:00

CWE-310

[email protected]

web.nvd.nist.gov

cve-2013-2782

schneider electric

trio j-series

license free ethernet radio

firmware 3.6.0

firmware 3.6.3

aes encryption

cryptographic protection mechanisms

remote attackers

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%

JSON

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers’ installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected configurations

NVD

Node

schneider-electrictburjr900Match00002dh0

schneider-electrictburjr900Match00002eh0

schneider-electrictburjr900Match01002dh0

schneider-electrictburjr900Match01002eh0

schneider-electrictburjr900Match05002dh0

schneider-electrictburjr900Match05002eh0

schneider-electrictburjr900Match06002dh0

schneider-electrictburjr900Match06002eh0

AND

schneider-electrictburjr900_firmwareMatch3.6.0

schneider-electrictburjr900_firmwareMatch3.6.1

schneider-electrictburjr900_firmwareMatch3.6.2

schneider-electrictburjr900_firmwareMatch3.6.3

CPENameOperatorVersion
schneider-electric:tburjr900schneider-electric tburjr900eq00002dh0
schneider-electric:tburjr900schneider-electric tburjr900eq00002eh0
schneider-electric:tburjr900schneider-electric tburjr900eq01002dh0
schneider-electric:tburjr900schneider-electric tburjr900eq01002eh0
schneider-electric:tburjr900schneider-electric tburjr900eq05002dh0
schneider-electric:tburjr900schneider-electric tburjr900eq05002eh0
schneider-electric:tburjr900schneider-electric tburjr900eq06002dh0
schneider-electric:tburjr900schneider-electric tburjr900eq06002eh0
schneider-electric:tburjr900_firmwareschneider-electric tburjr900 firmwareeq3.6.0
schneider-electric:tburjr900_firmwareschneider-electric tburjr900 firmwareeq3.6.1

CPE	Name	Operator	Version
schneider-electric:tburjr900	schneider-electric tburjr900	eq	00002dh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	00002eh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	01002dh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	01002eh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	05002dh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	05002eh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	06002dh0
schneider-electric:tburjr900	schneider-electric tburjr900	eq	06002eh0
schneider-electric:tburjr900_firmware	schneider-electric tburjr900 firmware	eq	3.6.0
schneider-electric:tburjr900_firmware	schneider-electric tburjr900 firmware	eq	3.6.1

Rows per page:

1-10 of 121

References

ics-cert.us-cert.gov/advisories/ICSA-13-234-01

www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.7%

JSON

Related for CVE-2013-2782

ics1 prion1 cvelist1 nvd1