NVD

Id
88109  
Name
CVE-2017-7905  
Description
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Version 5.23; SR 489 Generator Protection Relay, firmware versions prior to Version 4.06; SR 745 Transformer Protection Relay, firmware versions prior to Version 5.23; SR 369 Motor Protection Relay, all firmware versions; Multilin Universal Relay, firmware Version 6.0 and prior versions; and Multilin URplus (D90, C90, B95), all versions. Ciphertext versions of user passwords were created with a non-random initialization vector leaving them susceptible to dictionary attacks. Ciphertext of user passwords can be obtained from the front LCD panel of affected products and through issued Modbus commands.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-14  
Seq
2017-7905  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422274 88109 CVE-2016-8916 http://www.ibm.com/support/docview.wss?uid=swg21998166  View
430493 88109 CVE-2017-0695 99478  View
430494 88109 CVE-2017-0695 https://source.android.com/security/bulletin/2017-07-01  View
430495 88109 CVE-2017-0695 99478  View
430496 88109 CVE-2017-0695 https://source.android.com/security/bulletin/2017-07-01  View

Related JVN