CVE-2025-40946 A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions <…
Description
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| blueplanet 100 NX3 M8 | Versions not published | |
| blueplanet 100 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 105 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 105 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 110 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 125 NX3 M11 | Versions not published | |
| blueplanet 125 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 125 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 137 TL3 3.92 | earliest → < 3.92 | 3.92 |
Show the 25 other branches Hide the 25 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| blueplanet 150 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 150 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 155 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 155 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 165 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 165 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 25.0 NX3-33.0 NX3 | Versions not published | |
| blueplanet 3.0 NX3-20.0 NX3 | Versions not published | |
| blueplanet 3.0 TL3-60.0 TL3 | Versions not published | |
| blueplanet 3.0-5.0 NX1 | Versions not published | |
| blueplanet 360 NX3 M6 | Versions not published | |
| blueplanet 50.0 NX3-60.0 NX3 | Versions not published | |
| blueplanet 87.0 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 87.0 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet 92.0 TL3 3.92 | earliest → < 3.92 | 3.92 |
| blueplanet 92.0 TL3 GEN2 6.1 | earliest → < 6.1.4.9 | 6.1.4.9 |
| blueplanet gridsafe 110 TL3-S 3.91 | earliest → < 3.91 | 3.91 |
| blueplanet gridsafe 137 TL3-S 3.91 | earliest → < 3.91 | 3.91 |
| blueplanet gridsafe 92.0 TL3-S 3.91 | earliest → < 3.91 | 3.91 |
| blueplanet hybrid 10.0 TL3 | Versions not published | |
| blueplanet hybrid 6.0 NH3-12.0 NH3 | Versions not published | |
| blueplanet 125 NX3 M10 | Versions not published | |
| blueplanet gridsave 110 TL3-S 3.91 | earliest → < 3.91 | 3.91 |
| blueplanet gridsave 137 TL3-S 3.91 | earliest → < 3.91 | 3.91 |
| blueplanet gridsave 92.0 TL3-S 3.91 | earliest → < 3.91 | 3.91 |