CVE-2018-17935CWE-294
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission
published October 24, 2018
What it is
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00663 · 51.1th percentile
- Weakness
- CWE-294 · Authentication Bypass by Capture-replay
- Published
- 2018-10-24T13:00Z
EPSS history
Timeline