CVE-2017-9645 — MEDIUM (6.5)

Vulnerability Description

An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). Decryption of data is possible at the hardware level.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Mirion	Dmc 3000 Transmitter Firmware	-
Mirion	Dmc 3000 Transmitter	-
Mirion	Ipam Transmitter F\/Dmc 2000 Firmware	-
Mirion	Ipam Transmitter F\/Dmc 2000	-
Mirion	Rds-31 Itx Firmware	-
Mirion	Rds-31 Itx	-
Mirion	Drm-1\/2 Firmware	-
Mirion	Drm-1\/2	-
Mirion	Drm-2 Firmware	-
Mirion	Drm-2	-
Mirion	Rds-31 Firmware	-
Mirion	Rds-31	-
Mirion	Telepole 2 Firmware	-
Mirion	Telepole 2	-
Mirion	Wrm2 Firmware	-
Mirion	Wrm2	-

Related Weaknesses (CWE)

CWE-326

References

http://www.securityfocus.com/bid/100001Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02MitigationThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/100001Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02MitigationThird Party AdvisoryUS Government Resource

FAQ

What is CVE-2017-9645?

CVE-2017-9645 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 an...

How severe is CVE-2017-9645?

CVE-2017-9645 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-9645?

Check the references section above for vendor advisories and patch information. Affected products include: Mirion Dmc 3000 Transmitter Firmware, Mirion Dmc 3000 Transmitter, Mirion Ipam Transmitter F\/Dmc 2000 Firmware, Mirion Ipam Transmitter F\/Dmc 2000, Mirion Rds-31 Itx Firmware.