PT-2012-5647 · Tropos · Mesh Os

Published 2012-12-18 · Updated 2025-07-09 · CVE-2012-4898

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tropos wireless mesh routers Mesh OS versions prior to 7.9.1.1

Description The issue is related to insufficient entropy for SSH keys, making it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

Recommendations For Mesh OS versions prior to 7.9.1.1, update to version 7.9.1.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-4898

Affected Products

Mesh Os

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-4898 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-297-01.pdf · Note
• https://cisa.gov/news-events/ics-advisories/icsa-12-297-01 · Note
• https://t.me/cvenotify/128220 · Telegram Post