Description (CNA)
The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GE / Hydran M2, containing the 17046 Ethernet option | affected 0 before October 2014 |
CWE
CWE-343
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-041-02
- http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-041-02.json
ADP enrichment
No English description supplied.