CVE-2017-9649 - Vulnerability Details

Vendors	Products
Mirion Technologies	Dmc 3000 Dmc 3000 Firmware Drm-1\/2 Drm-1\/2 Firmware Ipam Transmitter F\/dmc 2000 Ipam Transmitter F\/dmc 2000 Firmware Rds-31 Itx Rds-31 Itx Firmware Rsd31-am Rsd31-am Firmware Telepole Ii Telepole Ii Firmware Wrm2 Mesh Repeater Wrm2 Mesh Repeater Firmware

Link	Providers
http://www.securityfocus.com/bid/100001
https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Mirion Technologies Telemetry Enabled Devices", "vendor": "n/a", "versions": [{"status": "affected", "version": "Mirion Technologies Telemetry Enabled Devices"}]}], "datePublic": "2017-09-20T00:00:00", "descriptions": [{"lang": "en", "value": "A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-321", "description": "CWE-321", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2017-09-21T09:57:01", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"name": "100001", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/100001"}, {"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2017-9649", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Mirion Technologies Telemetry Enabled Devices", "version": {"version_data": [{"version_value": "Mirion Technologies Telemetry Enabled Devices"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-321"}]}]}, "references": {"reference_data": [{"name": "100001", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100001"}, {"name": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T17:18:00.357Z"}, "title": "CVE Program Container", "references": [{"name": "100001", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/100001"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2017-9649", "datePublished": "2017-09-20T16:00:00", "dateReserved": "2017-06-14T00:00:00", "dateUpdated": "2024-08-05T17:18:00.357Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Mirion Technologies Telemetry Enabled Devices (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Mirion Technologies Telemetry Enabled Devices (string)

}

]

}

]

datePublic : 2017-09-20T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-321 (string)

description : CWE-321 (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-09-21T09:57:01 (string)

orgId : 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 (string)

shortName : icscert (string)

}

references : [ »

0 : { »

name : 100001 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/100001 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : ics-cert@hq.dhs.gov (string)

ID : CVE-2017-9649 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Mirion Technologies Telemetry Enabled Devices (string)

version : { »

version_data : [ »

0 : { »

version_value : Mirion Technologies Telemetry Enabled Devices (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-321 (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 100001 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/100001 (string)

}

1 : { »

name : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

refsource : MISC (string)

url : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T17:18:00.357Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 100001 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/100001 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 (string)

assignerShortName : icscert (string)

cveId : CVE-2017-9649 (string)

datePublished : 2017-09-20T16:00:00 (string)

dateReserved : 2017-06-14T00:00:00 (string)

dateUpdated : 2024-08-05T17:18:00.357Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:dmc_3000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECBC6372-8CD1-45F4-BE53-53D24BF22054", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:dmc_3000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E64F77B6-9389-4FF3-AB9B-99DD73590860", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:ipam_transmitter_f\\/dmc_2000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E14D28BB-776A-401B-B832-E57BAACD3FA5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:ipam_transmitter_f\\/dmc_2000:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA09D90D-53D8-4EE8-9966-D2884FBEFF7F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:telepole_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC1D83AF-67AC-4B1A-ACAB-599A1A629536", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:telepole_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "C188712C-2656-495B-871D-7025BCD84049", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:rds-31_itx_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1079AAF-23EC-4793-AE6A-E79DAF542E19", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:rds-31_itx:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE8121F6-BFF1-4E14-8341-5B29D1AD2F23", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:rsd31-am_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB8A46A6-58EC-403A-A5B7-05970784EB03", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:rsd31-am:-:*:*:*:*:*:*:*", "matchCriteriaId": "F09B515E-38E6-4C8D-8ECC-AD831DE407AD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:wrm2_mesh_repeater_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "64296E40-113A-4A82-A293-9E4525EA2233", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:wrm2_mesh_repeater:-:*:*:*:*:*:*:*", "matchCriteriaId": "223DC579-D37A-4AC7-8399-00BEA6B20D29", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mirion_technologies:drm-1\\/2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "30378F88-26B0-49B3-934D-7C3DB340D63E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mirion_technologies:drm-1\\/2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B1ABCEE-AA08-4D81-88BF-E18CEB923509", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware."}, {"lang": "es", "value": "Se ha descubierto un problema de uso de clave criptogr\u00e1fica embebida en Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX y variantes (incluyendo RSD31-AM Package), DRM-1/2 y variantes (incluyendo Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II y MESH Repeater (Telemetry Enabled Devices). Se incluye una clave de f\u00e1brica imposible de cambiar en el firmware transmisor de 900MHz."}], "id": "CVE-2017-9649", "lastModified": "2024-11-21T03:36:35.103", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 5.5, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 3.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-09-20T16:29:01.097", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100001"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100001"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-321"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:dmc_3000_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : ECBC6372-8CD1-45F4-BE53-53D24BF22054 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:dmc_3000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E64F77B6-9389-4FF3-AB9B-99DD73590860 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:ipam_transmitter_f\/dmc_2000_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E14D28BB-776A-401B-B832-E57BAACD3FA5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:ipam_transmitter_f\/dmc_2000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CA09D90D-53D8-4EE8-9966-D2884FBEFF7F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:telepole_ii_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FC1D83AF-67AC-4B1A-ACAB-599A1A629536 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:telepole_ii:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C188712C-2656-495B-871D-7025BCD84049 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:rds-31_itx_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F1079AAF-23EC-4793-AE6A-E79DAF542E19 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:rds-31_itx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE8121F6-BFF1-4E14-8341-5B29D1AD2F23 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:rsd31-am_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AB8A46A6-58EC-403A-A5B7-05970784EB03 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:rsd31-am:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F09B515E-38E6-4C8D-8ECC-AD831DE407AD (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:wrm2_mesh_repeater_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 64296E40-113A-4A82-A293-9E4525EA2233 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:wrm2_mesh_repeater:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 223DC579-D37A-4AC7-8399-00BEA6B20D29 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:mirion_technologies:drm-1\/2_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 30378F88-26B0-49B3-934D-7C3DB340D63E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mirion_technologies:drm-1\/2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B1ABCEE-AA08-4D81-88BF-E18CEB923509 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. (string)

}

1 : { »

lang : es (string)

value : Se ha descubierto un problema de uso de clave criptográfica embebida en Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX y variantes (incluyendo RSD31-AM Package), DRM-1/2 y variantes (incluyendo Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II y MESH Repeater (Telemetry Enabled Devices). Se incluye una clave de fábrica imposible de cambiar en el firmware transmisor de 900MHz. (string)

}

]

id : CVE-2017-9649 (string)

lastModified : 2024-11-21T03:36:35.103 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : ADJACENT_NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5.4 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:A/AC:M/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 5.5 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L (string)

version : 3.0 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 3.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-09-20T16:29:01.097 (string)

references : [ »

0 : { »

source : ics-cert@hq.dhs.gov (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/100001 (string)

}

1 : { »

source : ics-cert@hq.dhs.gov (string)

tags : [ »

0 : Mitigation (string)

1 : Third Party Advisory (string)

2 : US Government Resource (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/100001 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Third Party Advisory (string)

2 : US Government Resource (string)

]

url : https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02 (string)

}

]

sourceIdentifier : ics-cert@hq.dhs.gov (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-321 (string)

}

]

source : ics-cert@hq.dhs.gov (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-798 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Adjacent Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Adjacent Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object