VDE-2021-010

Vulnerability from csaf_endresshauserag - Published: 2021-05-18 09:00 - Updated: 2025-05-14 12:28
Summary
Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks
Notes
Summary: Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.
Impact: The feasibility of modifying the configuration of the device depends on the configuration settings regarding the used protocol (for example: OPC UA, http) to communicate via WLAN. - Access to operator network via device isn't possible because bridging in the device isn't supported. - The WLAN passphrase isn't readable. - Via OPC UA: read/write data access isn't possible if encryption is activated. - Via Webserver and CDI-RJ45: read data is possible. Write data isn't possible if individual password is used.
Mitigation: If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.
Recommendations: As a general security measure Endress+Hauser strongly recommends protecting network access to the WLAN network with appropriate mechanisms. It is advised to configure the environment according to best practices to run the devices in a protected IT environment. Further general recommendations apply for the affected products: Activate encryption for OPC UA For Webserver and CDI-RJ45: Change device default password to individual password For WLAN: Change WLAN default password to individual WLAN password
Remediation: Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.
CVE-2017-13077

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

6.8 (Medium)
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-330 - Use of Insufficiently Random Values
Mitigation If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.
Vendor Fix Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.
CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-330 - Use of Insufficiently Random Values
Mitigation If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.
Vendor Fix Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.
CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

5.3 (Medium)
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-330 - Use of Insufficiently Random Values
Mitigation If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.
Vendor Fix Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.
References
Acknowledgments
CERT@VDE certvde.com
imec-DistriNet Mathy Vanhoef
krackattacks KU Leuven
To clipboard 

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet",
        "summary": "reporting."
      },
      {
        "names": [
          "KU Leuven"
        ],
        "organization": "krackattacks",
        "summary": "reporting."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks.\nProline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "The feasibility of modifying the configuration of the device depends on the configuration settings regarding the used protocol (for example: OPC UA, http) to communicate via WLAN.\n\n- Access to operator network via device isn\u0027t possible because bridging in the device isn\u0027t supported.\n- The WLAN passphrase isn\u0027t readable.\n- Via OPC UA: read/write data access isn\u0027t possible if encryption is activated.\n- Via Webserver and CDI-RJ45: read data is possible. Write data isn\u0027t possible if individual password is used.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "As a general security measure Endress+Hauser strongly recommends protecting network access to the WLAN network with appropriate mechanisms. It is advised to configure the environment according to best practices to run the devices in a protected IT environment. Further general recommendations apply for the affected products:\n\nActivate encryption for OPC UA\nFor Webserver and CDI-RJ45: Change device default password to individual password\nFor WLAN: Change WLAN default password to individual WLAN password",
        "title": "Recommendations"
      },
      {
        "category": "description",
        "text": "Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@endress.com",
      "name": "Endress+Hauser AG",
      "namespace": "https://www.endress.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Endress+Hauser advisory overview at CERT@VDE",
        "url": "https://certvde.com/de/advisories/vendor/endress+hauser/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-010: Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-010"
      },
      {
        "category": "self",
        "summary": "VDE-2021-010: Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks - CSAF",
        "url": "https://endress-hauser.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-010.json"
      }
    ],
    "title": "Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks",
    "tracking": {
      "aliases": [
        "VDE-2021-010"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2024-12-09T10:29:39.482Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.16"
        }
      },
      "id": "VDE-2021-010",
      "initial_release_date": "2021-05-18T09:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-05-15T09:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "date": "2025-05-14T12:28:19.000Z",
          "number": "2",
          "summary": "Fix: version space, added distribution"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Promag 300 with EtherNet/IP",
                "product": {
                  "name": "Promag 300 with EtherNet/IP",
                  "product_id": "CSAFPID-11001"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 300 with Foundation Fieldbus",
                "product": {
                  "name": "Promag 300 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11002"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 300 with HART",
                "product": {
                  "name": "Promag 300 with HART",
                  "product_id": "CSAFPID-11003"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 300 with MODBUS",
                "product": {
                  "name": "Promag 300 with MODBUS",
                  "product_id": "CSAFPID-11004"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 300 with Profibus PA",
                "product": {
                  "name": "Promag 300 with Profibus PA",
                  "product_id": "CSAFPID-11005"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 300 with PROFINET",
                "product": {
                  "name": "Promag 300 with PROFINET",
                  "product_id": "CSAFPID-11006"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 400 with HART",
                "product": {
                  "name": "Promag 400 with HART",
                  "product_id": "CSAFPID-11007"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with EtherNet/IP",
                "product": {
                  "name": "Promag 500 with EtherNet/IP",
                  "product_id": "CSAFPID-11008"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with Foundation Fieldbus",
                "product": {
                  "name": "Promag 500 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11009"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with HART",
                "product": {
                  "name": "Promag 500 with HART",
                  "product_id": "CSAFPID-11010"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with MODBUS",
                "product": {
                  "name": "Promag 500 with MODBUS",
                  "product_id": "CSAFPID-11011"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with Profibus PA",
                "product": {
                  "name": "Promag 500 with Profibus PA",
                  "product_id": "CSAFPID-11012"
                }
              },
              {
                "category": "product_name",
                "name": "Promag 500 with PROFINET",
                "product": {
                  "name": "Promag 500 with PROFINET",
                  "product_id": "CSAFPID-11013"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with EtherNet/IP",
                "product": {
                  "name": "Promass 300 with EtherNet/IP",
                  "product_id": "CSAFPID-11014"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with Foundation Fieldbus",
                "product": {
                  "name": "Promass 300 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11015"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with HART",
                "product": {
                  "name": "Promass 300 with HART",
                  "product_id": "CSAFPID-11016"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with MODBUS",
                "product": {
                  "name": "Promass 300 with MODBUS",
                  "product_id": "CSAFPID-11017"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with Profibus PA",
                "product": {
                  "name": "Promass 300 with Profibus PA",
                  "product_id": "CSAFPID-11018"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 300 with PROFINET",
                "product": {
                  "name": "Promass 300 with PROFINET",
                  "product_id": "CSAFPID-11019"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with EtherNet/IP",
                "product": {
                  "name": "Promass 500 with EtherNet/IP",
                  "product_id": "CSAFPID-11020"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with Foundation Fieldbus",
                "product": {
                  "name": "Promass 500 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11021"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with HART",
                "product": {
                  "name": "Promass 500 with HART",
                  "product_id": "CSAFPID-11022"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with MODBUS",
                "product": {
                  "name": "Promass 500 with MODBUS",
                  "product_id": "CSAFPID-11023"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with Profibus PA",
                "product": {
                  "name": "Promass 500 with Profibus PA",
                  "product_id": "CSAFPID-11024"
                }
              },
              {
                "category": "product_name",
                "name": "Promass 500 with PROFINET",
                "product": {
                  "name": "Promass 500 with PROFINET",
                  "product_id": "CSAFPID-11025"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Display for Promag 300",
                "product": {
                  "name": "Spare Display for Promag 300",
                  "product_id": "CSAFPID-11026"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Display for Promag 400",
                "product": {
                  "name": "Spare Display for Promag 400",
                  "product_id": "CSAFPID-11027"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Display for Promag 500",
                "product": {
                  "name": "Spare Display for Promag 500",
                  "product_id": "CSAFPID-11028"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Display for Promass 300",
                "product": {
                  "name": "Spare Display for Promass 300",
                  "product_id": "CSAFPID-11029"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Display for Promass 500",
                "product": {
                  "name": "Spare Display for Promass 500",
                  "product_id": "CSAFPID-11030"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with EtherNet/IP",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with EtherNet/IP",
                  "product_id": "CSAFPID-11031"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with Foundation Fieldbus",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11032"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with HART",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with HART",
                  "product_id": "CSAFPID-11033"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with MODBUS",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with MODBUS",
                  "product_id": "CSAFPID-11034"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with Profibus PA",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with Profibus PA",
                  "product_id": "CSAFPID-11035"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 300 with PROFINET",
                "product": {
                  "name": "Spare Transmitter for Promag 300 with PROFINET",
                  "product_id": "CSAFPID-11036"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 400 with HART",
                "product": {
                  "name": "Spare Transmitter for Promag 400 with HART",
                  "product_id": "CSAFPID-11037"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with EtherNet/IP",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with EtherNet/IP",
                  "product_id": "CSAFPID-11038"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with Foundation Fieldbus",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11039"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with HART",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with HART",
                  "product_id": "CSAFPID-11040"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with MODBUS",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with MODBUS",
                  "product_id": "CSAFPID-11041"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with Profibus PA",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with Profibus PA",
                  "product_id": "CSAFPID-11042"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promag 500 with PROFINET",
                "product": {
                  "name": "Spare Transmitter for Promag 500 with PROFINET",
                  "product_id": "CSAFPID-11043"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with EtherNet/IP",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with EtherNet/IP",
                  "product_id": "CSAFPID-11044"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with Foundation Fieldbus",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with Foundation Fieldbus",
                  "product_id": "CSAFPID-11045"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with HART",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with HART",
                  "product_id": "CSAFPID-11046"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with MODBUS",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with MODBUS",
                  "product_id": "CSAFPID-11047"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with Profibus PA",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with Profibus PA",
                  "product_id": "CSAFPID-11048"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 300 with PROFINET",
                "product": {
                  "name": "Spare Transmitter for Promass 300 with PROFINET",
                  "product_id": "CSAFPID-11049"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with EtherNet/IP",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with EtherNet/IP",
                  "product_id": "CSAFPID-11050"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with Foundation Fieldbus",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with Foundation Fieldbus",
                  "product_id": "CSAFPID-0061"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with HART",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with HART",
                  "product_id": "CSAFPID-11052"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with MODBUS",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with MODBUS",
                  "product_id": "CSAFPID-11053"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with Profibus PA",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with Profibus PA",
                  "product_id": "CSAFPID-11054"
                }
              },
              {
                "category": "product_name",
                "name": "Spare Transmitter for Promass 500 with PROFINET",
                "product": {
                  "name": "Spare Transmitter for Promass 500 with PROFINET",
                  "product_id": "CSAFPID-11055"
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=01.01.02",
                "product": {
                  "name": "Firmware \u003c=01.01.02",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=01.00.01",
                "product": {
                  "name": "Firmware \u003c=01.00.01",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=01.01.01",
                "product": {
                  "name": "Firmware \u003c=01.01.01",
                  "product_id": "CSAFPID-21003"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=01.00.02",
                "product": {
                  "name": "Firmware \u003c=01.00.02",
                  "product_id": "CSAFPID-21004"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=01.00.03",
                "product": {
                  "name": "Firmware \u003c=01.00.03",
                  "product_id": "CSAFPID-21005"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=02.00.01",
                "product": {
                  "name": "Firmware \u003c=02.00.01",
                  "product_id": "CSAFPID-21006"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=01.01.00",
                "product": {
                  "name": "Firmware \u003c=01.01.00",
                  "product_id": "CSAFPID-21007"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Pepperl+Fuchs"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050",
          "CSAFPID-31051",
          "CSAFPID-31052",
          "CSAFPID-31053",
          "CSAFPID-31054",
          "CSAFPID-31055"
        ],
        "summary": "Affected Products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promag 300 with EtherNet/IP",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promag 300 with Foundation Fieldbus",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.01 installed on Promag 300 with HART",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Promag 300 with MODBUS",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Promag 300 with Profibus PA",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promag 300 with PROFINET",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=02.00.01 installed on Promag 400 with HART",
          "product_id": "CSAFPID-31007"
        },
        "product_reference": "CSAFPID-21006",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promag 500 with EtherNet/IP",
          "product_id": "CSAFPID-31008"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promag 500 with Foundation Fieldbus",
          "product_id": "CSAFPID-31009"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.01 installed on Promag 500 with HART",
          "product_id": "CSAFPID-31010"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Promag 500 with MODBUS",
          "product_id": "CSAFPID-31011"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Promag 500 with Profibus PA",
          "product_id": "CSAFPID-31012"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promag 500 with PROFINET",
          "product_id": "CSAFPID-31013"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promass 300 with EtherNet/IP",
          "product_id": "CSAFPID-31014"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promass 300 with Foundation Fieldbus",
          "product_id": "CSAFPID-31015"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promass 300 with HART",
          "product_id": "CSAFPID-31016"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Promass 300 with MODBUS",
          "product_id": "CSAFPID-31017"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Promass 300 with Profibus PA",
          "product_id": "CSAFPID-31018"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promass 300 with PROFINET",
          "product_id": "CSAFPID-31019"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11019"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promass 500 with EtherNet/IP",
          "product_id": "CSAFPID-31020"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11020"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promass 500 with Foundation Fieldbus",
          "product_id": "CSAFPID-31021"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-0061"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Promass 500 with HART",
          "product_id": "CSAFPID-31022"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Promass 500 with MODBUS",
          "product_id": "CSAFPID-31023"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11023"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Promass 500 with Profibus PA",
          "product_id": "CSAFPID-31024"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11024"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Promass 500 with PROFINET",
          "product_id": "CSAFPID-31025"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11025"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promag 300 with Foundation Fieldbus",
          "product_id": "CSAFPID-31026"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11032"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.01 installed on Spare Transmitter for Promag 300 with HART",
          "product_id": "CSAFPID-31027"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11033"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Spare Transmitter for Promag 300 with MODBUS",
          "product_id": "CSAFPID-31028"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11034"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Spare Transmitter for Promag 300 with Profibus PA",
          "product_id": "CSAFPID-31029"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11035"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promag 300 with PROFINET",
          "product_id": "CSAFPID-31030"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11036"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=02.00.01 installed on Spare Transmitter for Promag 400 with HART",
          "product_id": "CSAFPID-31031"
        },
        "product_reference": "CSAFPID-21006",
        "relates_to_product_reference": "CSAFPID-11037"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promag 500 with EtherNet/IP",
          "product_id": "CSAFPID-31032"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11038"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promag 500 with Foundation Fieldbus",
          "product_id": "CSAFPID-31033"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11039"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.01 installed on Spare Transmitter for Promag 500 with HART",
          "product_id": "CSAFPID-31034"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11040"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Spare Transmitter for Promag 500 with MODBUS",
          "product_id": "CSAFPID-31035"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11041"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Spare Transmitter for Promag 500 with Profibus PA",
          "product_id": "CSAFPID-31036"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11042"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promag 500 with PROFINET",
          "product_id": "CSAFPID-31037"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11043"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promass 300 with EtherNet/IP",
          "product_id": "CSAFPID-31038"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11044"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promass 300 with Foundation Fieldbus",
          "product_id": "CSAFPID-31039"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11045"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promass 300 with HART",
          "product_id": "CSAFPID-31040"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11046"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Spare Transmitter for Promass 300 with MODBUS",
          "product_id": "CSAFPID-31041"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11047"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Spare Transmitter for Promass 300 with Profibus PA",
          "product_id": "CSAFPID-31042"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11048"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promass 300 with PROFINET",
          "product_id": "CSAFPID-31043"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11049"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promass 500 with EtherNet/IP",
          "product_id": "CSAFPID-31044"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11050"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promass 500 with Foundation Fieldbus",
          "product_id": "CSAFPID-31045"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-0061"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promass 500 with HART",
          "product_id": "CSAFPID-31046"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11052"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.02 installed on Spare Transmitter for Promass 500 with MODBUS",
          "product_id": "CSAFPID-31047"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11053"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.03 installed on Spare Transmitter for Promass 500 with Profibus PA",
          "product_id": "CSAFPID-31048"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11054"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.00.01 installed on Spare Transmitter for Promass 500 with PROFINET",
          "product_id": "CSAFPID-31049"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11055"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.00 installed on Spare Display for Promag 300",
          "product_id": "CSAFPID-31050"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11026"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.00 installed on Spare Display for Promag 400",
          "product_id": "CSAFPID-31051"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11027"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.00 installed on Spare Display for Promag 500",
          "product_id": "CSAFPID-31052"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11028"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.00 installed on Spare Display for Promass 300",
          "product_id": "CSAFPID-31053"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11029"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.00 installed on Spare Display for Promass 500",
          "product_id": "CSAFPID-31054"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11030"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=01.01.02 installed on Spare Transmitter for Promag 300 with EtherNet/IP",
          "product_id": "CSAFPID-31055"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11031"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050",
          "CSAFPID-31051",
          "CSAFPID-31052",
          "CSAFPID-31053",
          "CSAFPID-31054",
          "CSAFPID-31055"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023",
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036",
            "CSAFPID-31037",
            "CSAFPID-31038",
            "CSAFPID-31039",
            "CSAFPID-31040",
            "CSAFPID-31041",
            "CSAFPID-31042",
            "CSAFPID-31043",
            "CSAFPID-31044",
            "CSAFPID-31045",
            "CSAFPID-31046",
            "CSAFPID-31047",
            "CSAFPID-31048",
            "CSAFPID-31049",
            "CSAFPID-31050",
            "CSAFPID-31051",
            "CSAFPID-31052",
            "CSAFPID-31053",
            "CSAFPID-31054",
            "CSAFPID-31055"
          ]
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050",
          "CSAFPID-31051",
          "CSAFPID-31052",
          "CSAFPID-31053",
          "CSAFPID-31054",
          "CSAFPID-31055"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023",
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036",
            "CSAFPID-31037",
            "CSAFPID-31038",
            "CSAFPID-31039",
            "CSAFPID-31040",
            "CSAFPID-31041",
            "CSAFPID-31042",
            "CSAFPID-31043",
            "CSAFPID-31044",
            "CSAFPID-31045",
            "CSAFPID-31046",
            "CSAFPID-31047",
            "CSAFPID-31048",
            "CSAFPID-31049",
            "CSAFPID-31050",
            "CSAFPID-31051",
            "CSAFPID-31052",
            "CSAFPID-31053",
            "CSAFPID-31054",
            "CSAFPID-31055"
          ]
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050",
          "CSAFPID-31051",
          "CSAFPID-31052",
          "CSAFPID-31053",
          "CSAFPID-31054",
          "CSAFPID-31055"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023",
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036",
            "CSAFPID-31037",
            "CSAFPID-31038",
            "CSAFPID-31039",
            "CSAFPID-31040",
            "CSAFPID-31041",
            "CSAFPID-31042",
            "CSAFPID-31043",
            "CSAFPID-31044",
            "CSAFPID-31045",
            "CSAFPID-31046",
            "CSAFPID-31047",
            "CSAFPID-31048",
            "CSAFPID-31049",
            "CSAFPID-31050",
            "CSAFPID-31051",
            "CSAFPID-31052",
            "CSAFPID-31053",
            "CSAFPID-31054",
            "CSAFPID-31055"
          ]
        }
      ],
      "title": "CVE-2017-13080"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.