CVEvulnerability
CVE-2013-2782
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-310
Description
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Affected configurations
• schneider-electric tburjr900 00002dh0
• schneider-electric tburjr900 00002eh0
• schneider-electric tburjr900 01002dh0
• schneider-electric tburjr900 01002eh0
• schneider-electric tburjr900 05002dh0
• schneider-electric tburjr900 05002eh0
• schneider-electric tburjr900 06002dh0
• schneider-electric tburjr900 06002eh0
• schneider-electric tburjr900 firmware 3.6.0
• schneider-electric tburjr900 firmware 3.6.1
• schneider-electric tburjr900 firmware 3.6.2
• schneider-electric tburjr900 firmware 3.6.3
Related
Weakness · not in database (1)
References
- http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01 US Government Resource
- http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01 US Government Resource
- http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf Vendor Advisory