CVE-2014-5409

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these values.

Scoring

CVSS base score

6.4

CVSS vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS probability

2.29%

CWE

CWE-343

Published

2015-03-14

Last modified

2026-03-15

Affected products

• GE Hydran M2, containing the 17046 Ethernet option

Weakness type

• CWE-343

Related vulnerabilities

• CVE-2026-33221 — Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload
• CVE-2026-32694 — Insecure Direct Object Reference attack via predictable secret ID in Juju
• CVE-2017-7901 — A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation...
• CVE-2017-6030 — Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

Markdown version · Browse all CVEs