PT-2018-14284
CVE-2018-17935
·
Published
2018-10-24
·
Updated
2020-09-18
Description by
CVSS 3.1
8.1
HighMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Telecrane F25 Series Radio Controls versions prior to 00.0A
Description
The issue concerns the use of fixed codes in the Telecrane F25 Series Radio Controls, which can be reproduced by sniffing and re-transmission. This allows for unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Recommendations
For versions prior to 00.0A, update to version 00.0A or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾