CVE-2013-2782: Critical severity schneider electric tburjr900 vulnerability
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2782?
CVE-2013-2782 has a high severity level due to the risk of remote exploitation resulting from the use of a shared AES encryption key.
How do I fix CVE-2013-2782?
To mitigate CVE-2013-2782, update the firmware on the Schneider Electric Trio J-Series License Free Ethernet Radio to a version that uses a unique AES encryption key.
What products are affected by CVE-2013-2782?
CVE-2013-2782 affects Schneider Electric Trio J-Series License Free Ethernet Radios running firmware versions 3.6.0 through 3.6.3.
Can CVE-2013-2782 be exploited remotely?
Yes, CVE-2013-2782 can be exploited remotely since it allows attackers to utilize knowledge of the shared AES encryption key.
What are the implications of CVE-2013-2782?
The implications of CVE-2013-2782 include potential unauthorized access and defeat of cryptographic protection mechanisms in affected installations.