Session fixation

RuggedCom Rugged Operating System ROS 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 TELNET, 2 remot...

Session fixation

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

CVE-2012-2441

CVE-2012-2441 affects RuggedCom Rugged Operating System (ROS) versions prior to 3.3. A factory account password is derived from the MAC Address in the device banner, enabling remote attackers to gain access by authenticating via SSH or HTTPS. Related entry CVE-2012-1803 covers similar behavior en...

CVE-2012-1803

RuggedCom Rugged Operating System ROS 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 TELNET, 2 remot...

CVE-2012-1803

CVE-2012-1803 affects RuggedCom Rugged Operating System (ROS) 3.10.x and earlier. A factory account with a password derived from the MAC Address field in the banner allows remote attackers to gain access by computing the password and then establishing TELNET, remote shell (rsh), or serial-console...

CVE-2012-2441

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

Backdoor In Equipment Used For Traffic Control, Railways Called "Huge Risk"

UPDATE: Security researchers are warning about the risk posed by an embarrassing security hole in industrial control software by the firm RuggedCom. A hidden administrative account could give remote attackers easy access to critical equipment that is used to manage a wide range of critical...

RuggedCom Device Undocumented Backdoor

Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardened" networking equipment. You'll find...

RuggedCom Rugged Operating System Vulnerability

RuggedCom Rugged Operating System ROS, used in RuggedCom network infrastructure devices, contains a hard-coded user account with a predictable password. This user account cannot be manually disabled. An attacker who successfully guesses the password may be able to gain complete administrative...

RuggedCom Rugged Operating System (ROS) contains hard-coded user account with predictable password

Overview RuggedCom Rugged Operating System ROS contains a hard-coded user account with a predictable password. Description RuggedCom Rugged Operating System ROS, used in RuggedCom network infrastructure devices, contains a hard-coded user account named "factory" that cannot be disabled. The...

RuggedCom Devices - Backdoor Access

Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardened" networking equipment. You'll find...

RuggedCom SCADA equipment backdoor

RuggedCom's Rugged Operating System backdoor account...

RuggedCom Devices Backdoor Access

Exploit for hardware platform in category remote exploits Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial...

RuggedCom Devices - Backdoor Access

RuggedCom Devices - Backdoor Access Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardene...

RuggedCom - Backdoor Accounts in my SCADA network? You don't say...

Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardened" networking equipment. You'll find...

RuggedCom Weak Cryptography for Password Vulnerability

Overview --------- Begin Update A Part 1 of 2 -------- This is an update to the original advisory titled ICSA-12-146-01—RuggedCom Weak Cryptography for Password Vulnerability that was published May 25, 2012, on the ICS-CERT Web page. Independent researcher Justin W. Clarke identified a default...