6.4 Not rated

CVE-2014-5409 The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate…

Description

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.

Affected products and versions

Product	Affected versions	Fixed in
Hydran M2, containing the 17046 Ethernet option	Versions not published

Do you use Hydran M2, containing the 17046 Ethernet option?

Track this CVE Watch Hydran M2, containing the 17046 Ethernet option Check my SBOMs

www.cveye.io/en/cve/CVE-2014-5409

Timeline

Published March 14, 2015
Last modified November 3, 2025

References

www.cisa.gov www.cisa.gov
libraries.ge.com libraries.ge.com
github.com github.com

Track this CVE