CVE-2012-3039

2013-08-0923:00:00

icscert

www.cve.org

moxa oncell

gateway

firmware vulnerability

ssh

ssl

remote attackers

access

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

59.1%

JSON

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.

References

ics-cert.us-cert.gov/advisories/ICSA-13-217-01