high8.8
CVE-2018-19023
Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission.
Impact
Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hetronic | Nova-M Firmware | before r161 |
| Hetronic | Es-Can-Hl Firmware | before main_r1864 |
| Hetronic | Bms-Hl Firmware | before main_r1175 |
| Hetronic | Mlc Firmware | before main_r1600 |
| Hetronic | Dc Mobile Firmware | before main_r515 |