What’s Vulnerable › Vulnerabilities

CVE-2017-9649

• Severity: medium (CVSS 5.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-20 · updated 2026-06-17
• Weakness: CWE-321

Description

A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants (including RSD31-AM Package), DRM-1/2 and variants (including Solar PWR Package), DRM and RDS Based Boundary Monitors, External Transmitters, Telepole II, and MESH Repeater (Telemetry Enabled Devices). An unchangeable, factory-set key is included in the 900 MHz transmitter firmware.

Affected products

• Mirion Technologies Dmc 3000 Firmware: all versions
• Mirion Technologies Drm-1/2 Firmware: all versions
• Mirion Technologies Ipam Transmitter F/Dmc 2000 Firmware: all versions
• Mirion Technologies Rds-31 Itx Firmware: all versions
• Mirion Technologies Rsd31-Am Firmware: all versions
• Mirion Technologies Telepole Ii Firmware: all versions
• Mirion Technologies Wrm2 Mesh Repeater Firmware: all versions

References

• http://www.securityfocus.com/bid/100001
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02
• http://www.securityfocus.com/bid/100001
• https://ics-cert.us-cert.gov/advisories/ICSA-17-208-02

Get alerted when CVE-2017-9649 or the next vulnerability affects your stack