PT-2013-1569 · Moxa · Moxa Oncell Gateway

Eric Wustrow + 3 · Published 2013-08-09 · Updated 2013-08-12 · CVE-2012-3039

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa OnCell Gateway versions prior to 1.4

Description The issue is related to insufficient entropy for SSH and SSL keys, making it easier for remote attackers to gain access by leveraging knowledge of a key from another product installation.

Recommendations For versions prior to 1.4, update the firmware to version 1.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-3039

Affected Products

Moxa Oncell Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-3039 · Security Note
• http://ics-cert.us-cert.gov/advisories/ICSA-13-217-01 · Note