GE Multilin UR / URPlus / B95Plus Protection Relay Cryptographic Algorithm Weakness Information Disclosure (UR-2017-0001)

critical Nessus Plugin ID 100462

Language:

Synopsis

The firmware installed on the remote GE Multilin UR, URPlus, or B95Plus protection relay device is affected by an information disclosure vulnerability.

Description

The firmware version installed on the remote GE Multilin UR, URPlus, or B95Plus protection relay device is affected by an information disclosure vulnerability due to cipher texts using non-random initialization vectors. An unauthenticated, remote attacker can exploit this, by conducting a dictionary attack, to disclose user passwords.

Solution

Upgrade the firmware on the GE Multilin device :

- UR : 5.83 / 5.92 / 6.02 or later
- URPlus : 1.86 / 1.92 or later
- B95Plus : 1.0.3 or later

Plugin Details

Severity: Critical

ID: 100462

File Name: scada_ge_multilin_protection_relay_UR-2017-0001.nbin

Version: 1.53

Type: remote

Family: SCADA

Published: 5/26/2017

Updated: 5/20/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2017-7905

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: x-cpe:/h:ge:multilin_universal_relay, x-cpe:/h:ge:multilin_urplus, x-cpe:/h:ge:multilin_b95plus, x-cpe:/h:ge:multilin_ur

Exploit Ease: No known exploits are available

Patch Publication Date: 4/27/2017

Vulnerability Publication Date: 4/27/2017

Reference Information

CVE: CVE-2017-7905

BID: 98063

IAVA: 2017-A-0158

ICSA: 17-117-01A

Detections

Analytics