Vulnerability Details CVE-2018-17935
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.1%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 4.8
References
Products affected by CVE-2018-17935
-
cpe:2.3:h:telecrane:f25-10d:-
-
cpe:2.3:h:telecrane:f25-10s:-
-
cpe:2.3:h:telecrane:f25-2d:-
-
cpe:2.3:h:telecrane:f25-2s:-
-
cpe:2.3:h:telecrane:f25-4d:-
-
cpe:2.3:h:telecrane:f25-4s:-
-
cpe:2.3:h:telecrane:f25-60:-
-
cpe:2.3:h:telecrane:f25-6d:-
-
cpe:2.3:h:telecrane:f25-6s:-
-
cpe:2.3:h:telecrane:f25-8d:-
-
cpe:2.3:h:telecrane:f25-8s:-
-
cpe:2.3:o:telecrane:f25-10d_firmware:-
-
cpe:2.3:o:telecrane:f25-10s_firmware:-
-
cpe:2.3:o:telecrane:f25-2d_firmware:-
-
cpe:2.3:o:telecrane:f25-2s_firmware:-
-
cpe:2.3:o:telecrane:f25-4d_firmware:-
-
cpe:2.3:o:telecrane:f25-4s_firmware:-
-
cpe:2.3:o:telecrane:f25-60_firmware:-
-
cpe:2.3:o:telecrane:f25-6d_firmware:-
-
cpe:2.3:o:telecrane:f25-6s_firmware:-
-
cpe:2.3:o:telecrane:f25-8d_firmware:-
-
cpe:2.3:o:telecrane:f25-8s_firmware:-