CVE-2017-9649

A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware.

Score

CVSS 3.0 5.0 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-09-20

Last modified

2024-08-05

Weaknesses

CWE-321, CWE-798

Affected products

• Dmc 3000 Firmware (Mirion Technologies)
• Drm-1/2 Firmware (Mirion Technologies)
• Ipam Transmitter F/dmc 2000 Firmware (Mirion Technologies)
• Rds-31 Itx Firmware (Mirion Technologies)
• Rsd31-am Firmware (Mirion Technologies)
• Telepole Ii Firmware (Mirion Technologies)
• Wrm2 Mesh Repeater Firmware (Mirion Technologies)

References

• http://www.securityfocus.com/bid/100001
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02