CISA ICSA-15-041-02: GE Hydran M2 Predictable TCP Initial Sequence Number Vulnerability

Vulnerability Key Information Summary Vulnerability ID: ICSA-15-041-02 Category: CSAF Security Advisory Version: 2.0 Disclosure Status: Disclosure is not limited (TLP: WHITE) Language: en-US Legal Disclaimer All information products are provided "as is" for informational purposes. CISA Disclaimer This CSAF advisory was extracted from unstructured data and may contain inaccuracies. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation. Minimize network exposure of all control system devices and/or systems, ensuring they are not directly accessible from the internet. Place control system networks and remote devices behind firewalls and isolate them from enterprise networks. When remote access is required, use more secure methods such as Virtual Private Networks (VPNs). CISA reminds organizations to perform appropriate impact analysis and risk assessment prior to deployment. CISA also provides a section on recommended practices for control system security. CISA encourages organizations to implement recommended cybersecurity practices. Additional mitigation guidance and recommended practices are publicly available on the ICS website. Organizations observing suspicious malicious activity should follow established internal procedures. CISA also recommends users take the following actions to protect themselves from social engineering and phishing attacks. Publisher Information Name: CISA Contact Email: central@cisa.dhs.gov Namespace: https://www.cisa.gov/ Reference Links ICS Advisory ICSA-15-041-02 JSON ICS Advisory ICSA-15-041-02 - Web Version Recommended Practices (multiple links) Vulnerability Summary Title: GE Hydran M2 Predictable TCP Initial Sequence Vulnerability CVSS v2 baseScore: 6.4 Product Status Affected Product ID: CSAFPID-0001 Mitigation Measures GE Digital Energy released a new Ethernet option version that resolves this issue. For Hydran M2 devices released before October 2014, no update is available. Place Hydran M2 within a control system cybersecurity zone for access control. Minimize network exposure of all other control system devices. Place control system networks and devices behind properly configured firewalls and isolate them from enterprise networks. Use secure methods such as Virtual Private Networks (VPNs) for remote access. GE Digital Energy’s product announcement can be found at the following location, requiring CISA credentials for access. Timeline Initial Release Time: 2015-11-13T07:00:00.000000Z

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-15-041-02: GE Hydran M2 Predictable TCP Initial Sequence Number Vulnerability

More from this source