CVE-2017-9645

Published: Sep 20, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). Decryption of data is possible at the hardware level.

Affected (8)

Products: Mirion: Dmc 3000 Transmitter Firmware, Ipam Transmitter F/dmc 2000 Firmware, Rds 31 Itx Firmware, Drm 1/2 Firmware, Drm 2 Firmware, Rds 31 Firmware, Telepole 2 Firmware, Wrm2 Firmware

Mirion

8 products

Dmc 3000 Transmitter Firmware

Ipam Transmitter F/dmc 2000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Dmc 3000 Transmitter Firmware	All versions

Running on/with	Platform Versions
Mirion Dmc 3000 Transmitter	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Ipam Transmitter F/dmc 2000 Firmware	All versions

Running on/with	Platform Versions
Mirion Ipam Transmitter F/dmc 2000	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Rds 31 Itx Firmware	All versions

Running on/with	Platform Versions
Mirion Rds 31 Itx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Drm 1/2 Firmware	All versions

Running on/with	Platform Versions
Mirion Drm 1/2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Drm 2 Firmware	All versions

Running on/with	Platform Versions
Mirion Drm 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Rds 31 Firmware	All versions

Running on/with	Platform Versions
Mirion Rds 31	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Telepole 2 Firmware	All versions

Running on/with	Platform Versions
Mirion Telepole 2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mirion Wrm2 Firmware	All versions

Running on/with	Platform Versions
Mirion Wrm2	All versions

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

http://www.securityfocus.com/bid/100001

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/100001

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.