PT-2012-4430 · Innominate · Mguard Blade+7
Alex Halderman
+3
·
Published
2012-06-19
·
Updated
2019-08-29
·
CVE-2012-3006
CVSS v2.0
7.1
High
| Vector | AV:N/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Innominate mGuard Smart HW versions before HW-101130
Innominate mGuard BD versions before BD-101030
Innominate mGuard industrial RS (affected versions not specified)
Innominate mGuard delta HW versions before HW-103060
Innominate mGuard delta BD versions before BD-211010
Innominate mGuard PCI (affected versions not specified)
Innominate mGuard blade (affected versions not specified)
Innominate EAGLE mGuard appliances with software versions prior to 7.5.0
Description
The issue is related to insufficient entropy for private keys, making it easier for man-in-the-middle attackers to spoof HTTPS or SSH servers by predicting a key value.
Recommendations
For Innominate mGuard Smart HW versions before HW-101130, update to a version after HW-101130.
For Innominate mGuard BD versions before BD-101030, update to a version after BD-101030.
For Innominate mGuard industrial RS, Innominate mGuard PCI, and Innominate mGuard blade, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Innominate mGuard delta HW versions before HW-103060, update to a version after HW-103060.
For Innominate mGuard delta BD versions before BD-211010, update to a version after BD-211010.
For Innominate EAGLE mGuard appliances with software versions prior to 7.5.0, update to software version 7.5.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Eagle Mguard
Mguard Bd
Mguard Pci
Mguard Smart Hw
Mguard Blade
Mguard Delta Bd
Mguard Delta Hw
Mguard Industrial Rs