PT-2012-3551 · Ruggedcom · Ruggedcom Rugged Operating System

Justin W. Clarke · Published 2012-04-28 · Updated 2022-02-01 · CVE-2012-1803

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RuggedCom Rugged Operating System (ROS) versions 3.10.x and earlier

Description The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in the banner, and then establishing a session via TELNET, remote shell (rsh), or serial-console.

Recommendations For versions 3.10.x and earlier, consider disabling remote access via TELNET, rsh, and serial-console until a fix is available. Restrict access to the factory account to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-1803

Affected Products

Ruggedcom Rugged Operating System

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/telnet_ruggedcom.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18779 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Apr/277 · Exploit
• 🔥 http://exploit-db.com/exploits/18779 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1803 · Security Note
• http://ruggedcom.com/productbulletin/ros-security-page · Vendor Advisory
• http://kb.cert.org/vuls/id/MAPG-8RCPEN · Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75120 · Note
• http://wired.com/threatlevel/2012/04/ruggedcom-backdoor · Note
• http://kb.cert.org/vuls/id/889195 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A · Note
• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars · Note
• http://securityfocus.com/bid/53215 · Note