{"api_version":"1","generated_at":"2026-07-23T08:35:43+00:00","cve":"CVE-2013-2782","urls":{"html":"https://cve.report/CVE-2013-2782","api":"https://cve.report/api/cve/CVE-2013-2782.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-2782","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-2782"},"summary":{"title":"CVE-2013-2782","description":"Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.","state":"PUBLISHED","assigner":"icscert","published_at":"2013-08-28 13:09:15","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-310","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf","name":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Product Documentation & Software downloads | Schneider Electric","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01","name":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"Schneider Electric Trio J-Series Radio Encryption | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2782","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2782","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"00002dh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"00002eh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"01002dh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"01002eh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"05002dh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"05002eh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"06002dh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"schneider-electric","cpe5":"tburjr900","cpe6":"06002eh0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"schneider-electric","cpe5":"tburjr900_firmware","cpe6":"3.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"schneider-electric","cpe5":"tburjr900_firmware","cpe6":"3.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"schneider-electric","cpe5":"tburjr900_firmware","cpe6":"3.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"schneider-electric","cpe5":"tburjr900_firmware","cpe6":"3.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T15:44:33.682Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-08-28T01:00:00.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"tags":["x_refsource_MISC"],"url":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2013-2782","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01","refsource":"MISC","url":"http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01"},{"name":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf","refsource":"CONFIRM","url":"http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdf"}]}}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2013-2782","datePublished":"2013-08-28T01:00:00.000Z","dateReserved":"2013-04-11T00:00:00.000Z","dateUpdated":"2024-09-16T16:22:35.646Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-08-28 13:09:15","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-310","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:00002dh0:*:*:*:*:*:*:*","matchCriteriaId":"3689A9D3-40FB-4135-A9D3-DFC7AFE7B10B"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:00002eh0:*:*:*:*:*:*:*","matchCriteriaId":"A92E024D-02C0-4B76-8352-ED5357DE34CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:01002dh0:*:*:*:*:*:*:*","matchCriteriaId":"816CA3DE-9453-4D60-886B-2BFED178B81B"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:01002eh0:*:*:*:*:*:*:*","matchCriteriaId":"9BF82506-8036-4928-9C88-F1DB3B7CCD74"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:05002dh0:*:*:*:*:*:*:*","matchCriteriaId":"61D7AD31-432E-48AE-A0FB-C6868164A461"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:05002eh0:*:*:*:*:*:*:*","matchCriteriaId":"07890C35-BB97-416E-A451-9AE2B35FA83A"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:06002dh0:*:*:*:*:*:*:*","matchCriteriaId":"5DB839C6-C3D3-4C61-BC6B-F550AF152965"},{"vulnerable":true,"criteria":"cpe:2.3:h:schneider-electric:tburjr900:06002eh0:*:*:*:*:*:*:*","matchCriteriaId":"580C28C8-0136-4F1F-8768-DF4C2F2A0500"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:tburjr900_firmware:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"29917F5D-651B-40C5-B5F7-0170B90389FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:tburjr900_firmware:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"483A3AE5-8421-47CB-8CB8-689D594EDE11"},{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:tburjr900_firmware:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4B1C8EB0-8562-44B0-9BAE-891089695AE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:schneider-electric:tburjr900_firmware:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"73E32FDE-9828-4E29-B0C0-BB1899A3296A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"2782","Ordinal":"1","Title":"CVE-2013-2782","CVE":"CVE-2013-2782","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"2782","Ordinal":"1","NoteData":"Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.","Type":"Description","Title":"CVE-2013-2782"},{"CveYear":"2013","CveId":"2782","Ordinal":"2","NoteData":"2013-08-27","Type":"Other","Title":"Published"}]}}}