PT-2012-4047 · Ruggedcom · Ruggedcom Rugged Operating System

Jc · Published 2012-04-28 · Updated 2022-02-01 · CVE-2012-2441

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RuggedCom Rugged Operating System (ROS) versions prior to 3.3

Description The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in a banner, and then establishing a SSH or HTTPS session.

Recommendations For versions prior to 3.3, update to version 3.3 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2012-2441

Affected Products

Ruggedcom Rugged Operating System

References · 9

• 🔥 https://exploit-db.com/exploits/18779 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2012/Apr/277 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2441 · Security Note
• http://ruggedcom.com/productbulletin/ros-security-page · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75244 · Note
• http://wired.com/threatlevel/2012/04/ruggedcom-backdoor · Note
• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars · Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf · Note
• http://kb.cert.org/vuls/id/889195 · Note