CVE-2014-5409: GE Hydran M2 Predictable Value Range from Previous Values

Published Mar 14, 2015

Updated

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.

Affected Software

1 affected component

GE Hydran M2

Remediation

Information

GE Digital Energy has released a new version of the Ethernet option, which resolves the identified vulnerability in newly released Hydran M2 devices. The update changes the sequence algorithm, which makes it improbable that a TCP sequence attack could succeed. The version of Ethernet card that implements this improvement is 94450214LFMT100SEM-L.R3-CL.

Event History

Mar 14, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-5409?

CVE-2014-5409 is categorized as a medium severity vulnerability due to its potential for remote packet spoofing.

How do I fix CVE-2014-5409?

To fix CVE-2014-5409, update to the latest firmware version provided by GE Digital Energy for the Hydran M2.

What does CVE-2014-5409 affect?

CVE-2014-5409 affects the 17046 Ethernet card used in the GE Digital Energy Hydran M2.

Can CVE-2014-5409 be exploited remotely?

Yes, CVE-2014-5409 can be exploited remotely by attackers who can predict TCP Initial Sequence Numbers.

What is the risk of not addressing CVE-2014-5409?

The risk of not addressing CVE-2014-5409 includes an increased chance of unauthorized access and potential disruption of network communications.