CVE-2012-4898

2022-10-0316:15:32

CWE-310

[email protected]

web.nvd.nist.gov

cve-2012-4898

mesh os

tropos

routers

man-in-the-middle attacks

insufficient entropy

nvd

6.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:C/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.6%

JSON

Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

Affected configurations

NVD

Node

troposmesh_osRange≤7.9.1

AND

tropos1310_distrubution_automation_mesh_routerMatch-

tropos1410_mesh_routerMatch-

tropos1410_wireless_mesh_routerMatch-

tropos3310_indoor_mesh_routerMatch-

tropos3320_indoor_mesh_routerMatch-

tropos4310_mobile_mesh_routerMatch-

tropos6310_mesh_routerMatch-

tropos6320_mesh_routerMatch-

CPENameOperatorVersion
tropos:mesh_ostropos mesh osle7.9.1
tropos:1310_distrubution_automation_mesh_routertropos 1310 distrubution automation mesh routereq-
tropos:1410_mesh_routertropos 1410 mesh routereq-
tropos:1410_wireless_mesh_routertropos 1410 wireless mesh routereq-
tropos:3310_indoor_mesh_routertropos 3310 indoor mesh routereq-
tropos:3320_indoor_mesh_routertropos 3320 indoor mesh routereq-
tropos:4310_mobile_mesh_routertropos 4310 mobile mesh routereq-
tropos:6310_mesh_routertropos 6310 mesh routereq-
tropos:6320_mesh_routertropos 6320 mesh routereq-

CPE	Name	Operator	Version
tropos:mesh_os	tropos mesh os	le	7.9.1
tropos:1310_distrubution_automation_mesh_router	tropos 1310 distrubution automation mesh router	eq	-
tropos:1410_mesh_router	tropos 1410 mesh router	eq	-
tropos:1410_wireless_mesh_router	tropos 1410 wireless mesh router	eq	-
tropos:3310_indoor_mesh_router	tropos 3310 indoor mesh router	eq	-
tropos:3320_indoor_mesh_router	tropos 3320 indoor mesh router	eq	-
tropos:4310_mobile_mesh_router	tropos 4310 mobile mesh router	eq	-
tropos:6310_mesh_router	tropos 6310 mesh router	eq	-
tropos:6320_mesh_router	tropos 6320 mesh router	eq	-