General Electric (GE) Hydran M2 CVE-2014-5409 Predictable Random Number Generator Weakness
BID:73026
Info
General Electric (GE) Hydran M2 CVE-2014-5409 Predictable Random Number Generator Weakness
| Bugtraq ID: | 73026 |
| Class: | Design Error |
| CVE: |
CVE-2014-5409 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2015 12:00AM |
| Updated: | Mar 10 2015 12:00AM |
| Credit: | Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech. |
| Vulnerable: |
General Electric Hydran M2 0 |
| Not Vulnerable: | |
Discussion
General Electric (GE) Hydran M2 CVE-2014-5409 Predictable Random Number Generator Weakness
General Electric (GE) Hydran M2 is prone to a predictable random number generator weakness.
An attacker can exploit this weakness to predict TCP initial sequence numbers or spoofing of TCP connections, resulting in a denial-of-service condition.
General Electric (GE) Hydran M2 is prone to a predictable random number generator weakness.
An attacker can exploit this weakness to predict TCP initial sequence numbers or spoofing of TCP connections, resulting in a denial-of-service condition.
Solution / Fix
General Electric (GE) Hydran M2 CVE-2014-5409 Predictable Random Number Generator Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
General Electric (GE) Hydran M2 CVE-2014-5409 Predictable Random Number Generator Weakness
References:
References:
- General electric HomePage (General electric)
- Hydran M2 Product Page (General Electric)
- GE Hydran M2 Predictable TCP Initial Sequence Vulnerability (CERT)