CVE-2013-2782

Description

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01
• http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf
• http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01
• http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf

CWEs

CWE-310

💬 Discuss CVE-2013-2782 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.