CVE-2017-9645

Medium

Description

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). Decryption of data is possible at the hardware level.

SeverityMedium
CVSS6.5
Exploit probability—
ProductMirion Ipam Transmitter F\/dmc 2000 Firmware
PublishedSep 20, 2017
First seenSep 20, 2017
Weakness typeCWE-326CWE-326

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mirion ipam_transmitter_f\/dmc_2000_firmwareNo range specified—
mirion dmc_3000_transmitter_firmwareNo range specified—
mirion rds-31_itx_firmwareNo range specified—
mirion drm-1\/2_firmwareNo range specified—
mirion drm-2_firmwareNo range specified—
mirion rds-31_firmwareNo range specified—
mirion telepole_2_firmwareNo range specified—
mirion wrm2_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-9645 · Mirion Ipam Transmitter F\/dmc 2000 Firmware · Dark Radar