Details of VAR-201709-1107

ID

VAR-201709-1107

CVE

CVE-2017-9649

TITLE

Mirion Technologies Telemetry Enabled Devices Denial of service vulnerability

Trust: 0.8

sources: IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // CNVD: CNVD-2017-22838

DESCRIPTION

A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware. plural Mirion Technologies The product contains a vulnerability related to the use of hard-coded credentials.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Mirion Technologies provides a source of solutions for nuclear, military, radiation detection and monitoring. Mirion Technologies Telemetry Enabled Devices is a denial of service vulnerability that could allow an attacker to transmit fraudulent data or perform denial of service. Successfully exploiting these issues may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. RSD31-AM Package), DRM-1/2 and variants (incl. are products of Mirion Technologies in the United States. Mirion Technologies DMC 3000 Transmitter Module is a DMC 3000 series control card

Trust: 2.7

sources: NVD: CVE-2017-9649 // JVNDB: JVNDB-2017-008474 // CNVD: CNVD-2017-22838 // BID: 100001 // IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // VULHUB: VHN-117852

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // CNVD: CNVD-2017-22838

AFFECTED PRODUCTS

vendor:	mirion	model:	dmc 3000	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	wrm2 mesh repeater	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	telepole ii	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	rds-31 itx	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	ipam transmitter f\/dmc 2000	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	rsd31-am	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	drm-1\/2	scope:	eq	version:	-	Trust: 1.6
vendor:	mirion	model:	dmc 3000 transmitter module	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	drm-1/2	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	ipam transmitter f/dmc 2000	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	mesh repeater	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	rds-31 itx	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	rsd31-am	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	telepole ii	scope:	-	version:	-	Trust: 0.8
vendor:	mirion	model:	telemetry enabled devices dmc transmitter module	scope:	eq	version:	3000	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices ipam transmitter f/dmc	scope:	eq	version:	2000	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices rds-31 itx and variants	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices drm-1/2 and variants	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices drm and rds based boundary monitors	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices telepole ii	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices external transmitters	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telemetry enabled devices mesh repeater	scope:	-	version:	-	Trust: 0.6
vendor:	mirion	model:	telepole ii	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	rds-31 itx	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	mesh repeater	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	ipam transmitter f/dmc	scope:	eq	version:	20000	Trust: 0.3
vendor:	mirion	model:	external transmitters	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	drm-1/2	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	drm and rds based boundary monitors	scope:	eq	version:	0	Trust: 0.3
vendor:	mirion	model:	dmc transmitter module	scope:	eq	version:	30000	Trust: 0.3
vendor:	dmc 3000	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	ipam transmitter f dmc 2000	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	telepole ii	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	rds 31 itx	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	rsd31 am	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	wrm2 mesh repeater	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	drm 1 2	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // CNVD: CNVD-2017-22838 // BID: 100001 // JVNDB: JVNDB-2017-008474 // CNNVD: CNNVD-201706-588 // NVD: CVE-2017-9649

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-9649
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2017-9649
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2017-22838
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201706-588
value:	MEDIUM
Trust: 0.6
IVD:	bb97c299-9654-48d6-b71d-ff9ddcbcad7f
value:	MEDIUM
Trust: 0.2
VULHUB:	VHN-117852
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-9649
severity:	MEDIUM
baseScore:	5.4
vectorString:	AV:A/AC:M/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	5.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-22838
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:A/AC:H/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.2
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	bb97c299-9654-48d6-b71d-ff9ddcbcad7f
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:A/AC:H/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.2
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-117852
severity:	MEDIUM
baseScore:	5.4
vectorString:	AV:A/AC:M/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	5.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-9649
baseSeverity:	MEDIUM
baseScore:	5.0
vectorString:	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector:	ADJACENT
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	LOW
exploitabilityScore:	1.6
impactScore:	3.4
version:	3.0
Trust: 1.8

sources: IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // CNVD: CNVD-2017-22838 // VULHUB: VHN-117852 // JVNDB: JVNDB-2017-008474 // CNNVD: CNNVD-201706-588 // NVD: CVE-2017-9649

PROBLEMTYPE DATA

problemtype:	CWE-798	Trust: 1.9
problemtype:	CWE-321	Trust: 1.0

sources: VULHUB: VHN-117852 // JVNDB: JVNDB-2017-008474 // NVD: CVE-2017-9649

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201706-588

TYPE

trust management problem

Trust: 0.6

sources: CNNVD: CNNVD-201706-588

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-008474

PATCH

title:	Top Page	url:	https://www.mirion.com/	Trust: 0.8
title:	Mirion Technologies Telemetry Enabled Devices Patch for Denial of Service Vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/100845	Trust: 0.6

sources: CNVD: CNVD-2017-22838 // JVNDB: JVNDB-2017-008474

EXTERNAL IDS

db:	NVD	id:	CVE-2017-9649	Trust: 3.6
db:	ICS CERT	id:	ICSA-17-208-02	Trust: 3.4
db:	BID	id:	100001	Trust: 2.0
db:	CNNVD	id:	CNNVD-201706-588	Trust: 0.9
db:	CNVD	id:	CNVD-2017-22838	Trust: 0.8
db:	JVNDB	id:	JVNDB-2017-008474	Trust: 0.8
db:	IVD	id:	BB97C299-9654-48D6-B71D-FF9DDCBCAD7F	Trust: 0.2
db:	VULHUB	id:	VHN-117852	Trust: 0.1

sources: IVD: bb97c299-9654-48d6-b71d-ff9ddcbcad7f // CNVD: CNVD-2017-22838 // VULHUB: VHN-117852 // BID: 100001 // JVNDB: JVNDB-2017-008474 // CNNVD: CNNVD-201706-588 // NVD: CVE-2017-9649

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-17-208-02	Trust: 3.4
url:	http://www.securityfocus.com/bid/100001	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-9649	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-9649	Trust: 0.8
url:	https://www.mirion.com/	Trust: 0.3

sources: CNVD: CNVD-2017-22838 // VULHUB: VHN-117852 // BID: 100001 // JVNDB: JVNDB-2017-008474 // CNNVD: CNNVD-201706-588 // NVD: CVE-2017-9649

CREDITS

Ruben Santamarta of IOActive

Trust: 0.3

sources: BID: 100001

SOURCES

db:	IVD	id:	bb97c299-9654-48d6-b71d-ff9ddcbcad7f
db:	CNVD	id:	CNVD-2017-22838
db:	VULHUB	id:	VHN-117852
db:	BID	id:	100001
db:	JVNDB	id:	JVNDB-2017-008474
db:	CNNVD	id:	CNNVD-201706-588
db:	NVD	id:	CVE-2017-9649

LAST UPDATE DATE

2024-11-23T22:45:35.651000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-22838	date:	2017-08-25T00:00:00
db:	VULHUB	id:	VHN-117852	date:	2019-10-09T00:00:00
db:	BID	id:	100001	date:	2017-07-27T00:00:00
db:	JVNDB	id:	JVNDB-2017-008474	date:	2017-10-19T00:00:00
db:	CNNVD	id:	CNNVD-201706-588	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2017-9649	date:	2024-11-21T03:36:35.103

SOURCES RELEASE DATE

db:	IVD	id:	bb97c299-9654-48d6-b71d-ff9ddcbcad7f	date:	2017-08-25T00:00:00
db:	CNVD	id:	CNVD-2017-22838	date:	2017-08-25T00:00:00
db:	VULHUB	id:	VHN-117852	date:	2017-09-20T00:00:00
db:	BID	id:	100001	date:	2017-07-27T00:00:00
db:	JVNDB	id:	JVNDB-2017-008474	date:	2017-10-19T00:00:00
db:	CNNVD	id:	CNNVD-201706-588	date:	2017-06-15T00:00:00
db:	NVD	id:	CVE-2017-9649	date:	2017-09-20T16:29:01.097