CVE-2017-9649
Medium
Description
A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware.
SeverityMedium
CVSS5.0
Exploit probability—
ProductMirion Technologies Ipam Transmitter F\/dmc 2000 Firmware
PublishedSep 20, 2017
First seenSep 20, 2017
Weakness typeCWE-321CWE-321
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mirion_technologies ipam_transmitter_f\/dmc_2000_firmware | No range specified | — |
| mirion_technologies dmc_3000_firmware | No range specified | — |
| mirion_technologies telepole_ii_firmware | No range specified | — |
| mirion_technologies rds-31_itx_firmware | No range specified | — |
| mirion_technologies rsd31-am_firmware | No range specified | — |
| mirion_technologies wrm2_mesh_repeater_firmware | No range specified | — |
| mirion_technologies drm-1\/2_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.