CVE-2013-2782

Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

• CWE-310

• http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01US Government Resource
• http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdfVendor Advisory
• http://ics-cert.us-cert.gov/advisories/ICSA-13-234-01US Government Resource
• http://www.schneider-electric.com/download/ww/en/file/141141292-SEVD-2013-143-01.pdfVendor Advisory

Published

Aug 28, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2776sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when …
• CVE-2013-2777sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_…
• CVE-2013-2778Cross-site request forgery (CSRF) vulnerability in addressbo…
• CVE-2013-2779Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3…
• CVE-2013-2780Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attack…
• CVE-2013-2781Use-after-free vulnerability in the server application in 3S…
• CVE-2013-2783The DNP3 driver in IOServer drivers 1.0.19.0 allows remote a…
• CVE-2013-2784Triangle Research International (aka Tri) Nano-10 PLC device…
• CVE-2013-2785Multiple buffer overflows in CimWebServer.exe in the WebView…
• CVE-2013-2786Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCO…
• CVE-2013-2787Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attack…
• CVE-2013-2788The DNP3 Slave service in SUBNET Solutions SubSTATION Server…