CVE-2014-9201

The CVE-2014-9201 issue affects Beckwith Electric devices that generate TCP initial sequence numbers (ISNs) insecurely, enabling TCP session spoofing due to predictable ISN values. Affected products include the M-6200 and M-6200A Digital Voltage Regulator Controllers (firmware before D-0198V04.07...

Beckwith Electric TCP Initial Sequence Vulnerability

OVERVIEW Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a research project partially sponsored by the Georgia Tech National Electric Energy Testing Research and Applications Center, have identified a TCP initial sequence numbers vulnerability in two of Beckwith Electric’s...