SSL Certificate Signed with the Publicly Known Cyberoam Key

The X.509 certificate of the remote host was signed by a certificate belonging to a Certificate Authority CA found in Cyberoam devices. The private key corresponding to the CA was discovered and publicly disclosed, meaning that the remote host's X.509 certificate cannot be trusted. TRUSTED...

CVE-2012-3372

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...

CVE-2012-3372

Cyberoam UTM and DPI devices are vulnerable due to a configuration flaw where all units share the same Certification Authority (CA) certificate and private key . This shared infrastructure allows a man-in-the-middle (MITM) attacker to spoof SSL servers by leveraging the Cyberoam_SSL_CA certificat...

VulnCheck KEV: CVE-2012-3372

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA...