CVE-2018-19023CWE-294

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission

published January 25, 2019

CVSS
—
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00753 · 54.5th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2019-01-25T20:00Z
EPSS history
Timeline
  • 25 JAN 20:00Z
    Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission
    cvelistv5