PT-2018-14284

CVE-2018-17935

·

Published

2018-10-24

·

Updated

2020-09-18

Description by

CVSS 3.1
8.1
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Telecrane F25 Series Radio Controls versions prior to 00.0A
Description The issue concerns the use of fixed codes in the Telecrane F25 Series Radio Controls, which can be reproduced by sniffing and re-transmission. This allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Recommendations For versions prior to 00.0A, update to version 00.0A or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
ZDI-18-1315
Found an issue in the description? Have something to add? Feel free to write us 👾