Lucene search

K
cveCertccCVE-2012-1803
HistoryApr 28, 2012 - 12:55 a.m.

CVE-2012-1803

2012-04-2800:55:01
CWE-310
certcc
web.nvd.nist.gov
59
ruggedcom
ros
os vulnerability
remote access
cve-2012-1803
nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.007

Percentile

80.7%

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.

Affected configurations

Nvd
Node
siemensruggedcom_rugged_operating_systemRange3.2.03.10.1
VendorProductVersionCPE
siemensruggedcom_rugged_operating_system*cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.007

Percentile

80.7%