PT-2013-1569 · Moxa · Moxa Oncell Gateway

Eric Wustrow + 3 · Publicado 2013-08-09 · Atualizado 2013-08-12 · CVE-2012-3039

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa OnCell Gateway versions prior to 1.4

Description The issue is related to insufficient entropy for SSH and SSL keys, making it easier for remote attackers to gain access by leveraging knowledge of a key from another product installation.

Recommendations For versions prior to 1.4, update the firmware to version 1.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-3039

Produtos afetados

Moxa Oncell Gateway

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3039 · Nota de Segurança
• http://ics-cert.us-cert.gov/advisories/ICSA-13-217-01 · Nota