CVE-2014-5409

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
gehydran_m2
*
𝑥
= Vulnerable software versions
References
http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101
https://ics-cert.us-cert.gov/advisories/ICSA-15-041-02
http://libraries.ge.com/download?fileid=642886573101&entity_id=31955841101&sid=101
https://ics-cert.us-cert.gov/advisories/ICSA-15-041-02