| |
Vulnerability CVE-2012-4716
Published: 2015-06-13
| Description: |
N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key. |
CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
8.8/10 |
9.2/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
Complete |
None |
References: |
https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
