CVE-2012-4698
Published Dec 23, 2012
Last updated 11 years ago
Overview
- Description
- Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and RuggedMax OS through 4.2.1.4621.22 use hardcoded private keys for SSL and SSH communication, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic by leveraging the availability of these keys within ROS files at all customer installations.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:ros:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44D6C891-CAB1-498D-B68E-84EF210EB39D",
"versionEndIncluding": "3.11.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:rox_i_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEFF857C-7B35-4E33-AC5A-FE8DDEEC13A4",
"versionEndIncluding": "1.14.5"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:rox_ii_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7537182F-7500-4FBF-87AB-5617D660676F",
"versionEndIncluding": "2.3.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:ruggedmax_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9001274A-0A68-4D69-ACEE-A7EDEC408AA8",
"versionEndIncluding": "4.2.1.4621.22"
}
],
"operator": "OR"
}
]
}
]