CVE-2018-17935

Published: Oct 24, 2018Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.

Affected (11)

Products: Telecrane: F25 2s Firmware, F25 2d Firmware, F25 4s Firmware, F25 4d Firmware, F25 6s Firmware, F25 6d Firmware, F25 8s Firmware, F25 8d Firmware, F25 10s Firmware, F25 10d Firmware, F25 60 Firmware

11 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 2s Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 2s	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 2d Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 2d	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 4s Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 4s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 4d Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 4d	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 6s Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 6s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 6d Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 6d	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 8s Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 8s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 8d Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 8d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 10s Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 10s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 10d Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 10d	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Telecrane F25 60 Firmware	Before 00.0a

Running on/with	Platform Versions
Telecrane F25 60	All versions

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (4)

http://www.securityfocus.com/bid/105732

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-296-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/105732

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-296-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.