ICSA-15-153-01

icsaUScisa_csaf_ot

Beckwith Electric TCP Initial Sequence Vulnerability

view advisory published 2015-03-05

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2014-9201USmedium6.4—
Beckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00, M-6200A Digital Voltage Regulator Control with firmware before D-0228V02.01.07, M-2…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationM-2001D Digital Tapchanger Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

  • MitigationM-6200 Digital Voltage Regulator Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

  • MitigationM-6200A Digital Voltage Regulator Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

  • MitigationM-6280 Digital Capacitor Bank Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

  • MitigationM-6280A Digital Capacitor Bank Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

  • MitigationM-6283A Three Phase Digital Capacitor Bank Control

    Beckwith Electric has developed firmware upgrades that resolve the predictable TCP initial sequence numbers vulnerability in all the affected products except for the M-6280 Digital Capacitor Bank Control. Beckwith Electric is offering a specific mitigation for the M-6280 Digital Capacitor Bank Control. Beckwith Electric has released a customer notification at www.becoconnect.com for users with a valid account. For firmware upgrades and the mitigation for the M-6280, contact Beckwith Electric’s Customer Technical Support at: Phone: (727) 544-2326 Email: (mailto:support@beckwithelectric.com).

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan