PT-2012-4047 · Ruggedcom · Ruggedcom Rugged Operating System

Jc · Publicado 2012-04-28 · Atualizado 2022-02-01 · CVE-2012-2441

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RuggedCom Rugged Operating System (ROS) versions prior to 3.3

Description The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in a banner, and then establishing a SSH or HTTPS session.

Recommendations For versions prior to 3.3, update to version 3.3 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-521

Identificadores relacionados

CVE-2012-2441

Produtos afetados

Ruggedcom Rugged Operating System

Referências · 9

• 🔥 https://exploit-db.com/exploits/18779 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Apr/277 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2441 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75244 · Nota
• http://ruggedcom.com/productbulletin/ros-security-page · Aviso do Fabricante
• http://wired.com/threatlevel/2012/04/ruggedcom-backdoor · Nota
• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars · Nota
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf · Nota
• http://kb.cert.org/vuls/id/889195 · Nota