Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4687
cve-2012-4687
post oak
awam
bluetooth
reader traffic system
entropy
private keys
man-in-the-middle attackers
spoofing
nvd
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.9%
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
Affected configurations
Node
postoaktrafficawam_bluetooth_readerMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| postoaktraffic:awam_bluetooth_reader | postoaktraffic awam bluetooth reader | eq | - |
Related
ics
ics
Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability
2020-01-10 12:00:00
prion
prion
Code injection
2012-12-08 15:55:00
nvd
nvd
CVE-2012-4687
2012-12-08 15:55:00
cvelist
cvelist
CVE-2012-4687
2022-10-03 16:15:33
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.9%
Related for CVE-2012-4687