Zakir Durumeric

Name of the Vulnerable Software and Affected Versions: TitanHQ WebTitan Gateway (affected versions not specified) Description: The issue concerns incorrect certificate validation for the TLS interception feature. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Moxa OnCell Gateway versions prior to 1.4 **Description** The issue is related to insufficient entropy for SSH and SSL keys, making it easier for remote attackers to gain access by leveraging knowledge of a key from another product installation. **Recommendations** For versions prior to 1.4, update the firmware to version 1.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Innominate mGuard Smart HW versions before HW-101130 Innominate mGuard BD versions before BD-101030 Innominate mGuard industrial RS (affected versions not specified) Innominate mGuard delta HW versions before HW-103060 Innominate mGuard delta BD versions before BD-211010 Innominate mGuard PCI (affected versions not specified) Innominate mGuard blade (affected versions not specified) Innominate EAGLE mGuard appliances with software versions prior to 7.5.0 **Description** The issue is related to insufficient entropy for private keys, making it easier for man-in-the-middle attackers to spoof HTTPS or SSH servers by predicting a key value. **Recommendations** For Innominate mGuard Smart HW versions before HW-101130, update to a version after HW-101130. For Innominate mGuard BD versions before BD-101030, update to a version after BD-101030. For Innominate mGuard industrial RS, Innominate mGuard PCI, and Innominate mGuard blade, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Innominate mGuard delta HW versions before HW-103060, update to a version after HW-103060. For Innominate mGuard delta BD versions before BD-211010, update to a version after BD-211010. For Innominate EAGLE mGuard appliances with software versions prior to 7.5.0, update to software version 7.5.0 or later.