NVD Vulnerability Detail

CVE-2017-9649

Summary	A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware.
Publication Date	Sept. 21, 2017, 1:29 a.m.
Registration Date	Jan. 26, 2021, 1:31 p.m.
Last Update	Nov. 21, 2024, 12:36 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:dmc_3000_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:dmc_3000:-:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:ipam_transmitter_f\/dmc_2000_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:ipam_transmitter_f\/dmc_2000:-:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:telepole_ii_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:telepole_ii:-:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:rds-31_itx_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:rds-31_itx:-:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:rsd31-am_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:rsd31-am:-:::::::*

Configuration6		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:wrm2_mesh_repeater_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:wrm2_mesh_repeater:-:::::::*

Configuration7		or higher	or less	more than	less than
cpe:2.3:o:mirion_technologies:drm-1\/2_firmware:-:::::::*
execution environment
1	cpe:2.3:h:mirion_technologies:drm-1\/2:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/100001	Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/100001	Third Party Advisory VDB Entry
3	https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02	Mitigation Third Party Advisory US Government Resource
4	https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02	Mitigation Third Party Advisory US Government Resource

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-798	ハードコードされた認証情報の使用	https://cwe.mitre.org/data/definitions/798.html

JVN Vulnerability Information

複数の Mirion Technologies 製品におけるハードコードされた認証情報の使用に関する脆弱性

Title	複数の Mirion Technologies 製品におけるハードコードされた認証情報の使用に関する脆弱性
Summary	複数の Mirion Technologies 製品には、ハードコードされた認証情報の使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	July 27, 2017, midnight
Registration Date	Oct. 19, 2017, 5:27 p.m.
Last Update	Oct. 19, 2017, 5:27 p.m.

Affected System

Mirion Technologies

DMC 3000 Transmitter Module ファームウェア

DRM-1/2 ファームウェア

iPam Transmitter f/DMC 2000 ファームウェア

MESH Repeater ファームウェア

RDS-31 iTX ファームウェア

RSD31-AM ファームウェア

Telepole II ファームウェア

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-9649	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9649
National Vulnerability Database (NVD)
2	CVE-2017-9649	https://nvd.nist.gov/vuln/detail/CVE-2017-9649

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-798	https://cwe.mitre.org/data/definitions/798.html

ベンダー情報

No	Name	URL
Mirion Technologies
1	Top Page	https://www.mirion.com/

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-17- 208-02	https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02

Change Log

No	Changed Details	Date of change
0	[2017年10月19日] 掲載	Feb. 17, 2018, 10:37 a.m.