CVE-2013-0137

Published Jun 30, 2013

Last updated 5 years ago

Overview

Description: The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session.
Source: cret@cert.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-310

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:digital_alert_systems:dasdec_eas:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4A5A9D54-20F6-4791-A830-3E6635A18933",
            "versionEndIncluding": "2.0-1"
          },
          {
            "criteria": "cpe:2.3:h:digital_alert_systems:dasdec_eas:2.0-0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "308B32AD-1091-4528-964B-7394D54B1D4E"
          },
          {
            "criteria": "cpe:2.3:h:monroe_electronics:r189_one-net_eas:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0AC044FA-0BC2-43D4-BF32-9B6FD67B8E77",
            "versionEndIncluding": "2.0-1"
          },
          {
            "criteria": "cpe:2.3:h:monroe_electronics:r189_one-net_eas:2.0-0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90C5BDD8-C91B-44EB-870E-FABEFCFA5F7B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References