high8.1
CVE-2018-17935
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission.
Impact
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telecrane | F25-2s Firmware | before 00.0a |
| Telecrane | F25-2d Firmware | before 00.0a |
| Telecrane | F25-4s Firmware | before 00.0a |
| Telecrane | F25-4d Firmware | before 00.0a |
| Telecrane | F25-6s Firmware | before 00.0a |
| Telecrane | F25-6d Firmware | before 00.0a |
| Telecrane | F25-8s Firmware | before 00.0a |
| Telecrane | F25-8d Firmware | before 00.0a |
| Telecrane | F25-10s Firmware | before 00.0a |
| Telecrane | F25-10d Firmware | before 00.0a |
| Telecrane | F25-60 Firmware | before 00.0a |