9.3

CVE-2013-2782

EPSS 1.35%
Veröffentlicht 28.08.2013 13:09:15
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

NVD 12 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Schneider-electric ≫ Tburjr900 Version 00002dh0

Schneider-electric ≫ Tburjr900 Version 00002eh0

Schneider-electric ≫ Tburjr900 Version 01002dh0

Schneider-electric ≫ Tburjr900 Version 01002eh0

Schneider-electric ≫ Tburjr900 Version 05002dh0

Schneider-electric ≫ Tburjr900 Version 05002eh0

Schneider-electric ≫ Tburjr900 Version 06002dh0

Schneider-electric ≫ Tburjr900 Version 06002eh0

Schneider-electric ≫ Tburjr900 Firmware Version 3.6.0

Schneider-electric ≫ Tburjr900 Firmware Version 3.6.1

Schneider-electric ≫ Tburjr900 Firmware Version 3.6.2

Schneider-electric ≫ Tburjr900 Firmware Version 3.6.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.35%	0.678

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01

US Government Resource

http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-2782

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2782

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2782

EUVD