PT-2012-3551 · Ruggedcom · Ruggedcom Rugged Operating System

Justin W. Clarke · Publicado 2012-04-28 · Atualizado 2022-02-01 · CVE-2012-1803

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RuggedCom Rugged Operating System (ROS) versions 3.10.x and earlier

Description The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in the banner, and then establishing a session via TELNET, remote shell (rsh), or serial-console.

Recommendations For versions 3.10.x and earlier, consider disabling remote access via TELNET, rsh, and serial-console until a fix is available. Restrict access to the factory account to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-1803

Produtos afetados

Ruggedcom Rugged Operating System

Referências · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/telnet_ruggedcom.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18779 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Apr/277 · Exploit
• 🔥 http://exploit-db.com/exploits/18779 · Exploit
• http://kb.cert.org/vuls/id/MAPG-8RCPEN · Nota
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1803 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75120 · Nota
• http://wired.com/threatlevel/2012/04/ruggedcom-backdoor · Nota
• http://kb.cert.org/vuls/id/889195 · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A · Nota
• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars · Nota
• http://ruggedcom.com/productbulletin/ros-security-page · Aviso do Fabricante
• http://securityfocus.com/bid/53215 · Nota