Lucene search

K
cve[email protected]CVE-2012-4716
HistoryJun 13, 2015 - 6:59 p.m.

CVE-2012-4716

2015-06-1318:59:00
CWE-310
web.nvd.nist.gov
26
n-tron 702-w
industrial wireless access point
ssh
https
private keys
security vulnerability
nvd
cve-2012-4716

6.9 Medium

AI Score

Confidence

Low

8.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:C/A:N

0.002 Low

EPSS

Percentile

53.8%

N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers’ installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.

6.9 Medium

AI Score

Confidence

Low

8.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:C/A:N

0.002 Low

EPSS

Percentile

53.8%

Related for CVE-2012-4716