CVE-2013-2566

mediumPriorität · beachten · 64OT-Risiko · hochEPSS 0.844 · 100. PerzentilExploit · funktionalEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · funktional

Likely / severe?

84.4% (100th) EPSS

CVSS 4.3 · medium

Is it mine?

65 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-22

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenUR B30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR B90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C70cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C95cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR D30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR D60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR F35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR F60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR G30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR G60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR M60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR N60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR T35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR T60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenAE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAE-200Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAE-200Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAE-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAE-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAG-150A-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenAG-150A-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenEB-50GU-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenEB-50GU-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenEW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenEW-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenEW-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenG-150ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenGB-50ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenGB-50ADA-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenGB-50ADA-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenTE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenTE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
BehobenTW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
MitigationUR B30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR B90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C70cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C95cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR D30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR D60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR F35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR F60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR G30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR G60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR M60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR N60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR T35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR T60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationAE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAE-200Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAE-200Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAE-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAE-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAG-150A-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationAG-150A-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationEB-50GU-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationEB-50GU-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationEW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationEW-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationEW-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationG-150ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationGB-50ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationGB-50ADA-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationGB-50ADA-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationTE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationTE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
MitigationTW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–7.5

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 3.6

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · CISA US

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NsecondaryAusnutzbarkeit 2.2 · Auswirkung 3.6

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Hsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-326USprimärCWE-326USCWE-327USCWE-327US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

auxiliary/scanner/ssl/ssl_versionSSL/TLS Version Detectionfunktional · metasploit

betroffene Produkte (65)

Betroffene Produkte und Versionsbereiche.

GE Veronva UR B30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR B90: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C70: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C95: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR D30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR D60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR F35: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR F60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR G30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR G60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L90: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR M60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR N60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR T35: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR T60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR B30< 8.10cisa_csaf_otUS

20 von 65 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-21-075-02GE UR Family (Update A)2021-03-16icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.
ICSA-22-160-01Mitsubishi Electric Air Conditioning Systems2022-06-09icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2013-03-15geändert 2026-06-16

verwandt (694)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2018-18325US	high7.5OT kritisch	74.0% (99th)	KEV	2019-07-03
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
CVE-2018-15811US	high7.5OT kritisch	76.3% (100th)	KEV	2019-07-03
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
CVE-2017-1000486US	critical9.8OT kritisch	94.1% (100th)	KEV	2018-01-03
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVE-2017-11317US	critical9.8OT kritisch	84.2% (100th)	KEV	2017-08-23
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitr…
CVE-2016-2183US	high7.5OT hoch	94.7% (100th)	Exploit	2016-09-01
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which mak…

+689 weitere

Referenzen (70)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan