description: Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
problem types: AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294
affected:
{
product: Hetronic Nova-M
vendor: Hetronic
versions:
status: affected, version: All versions prior to version r161
}