N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
References
| Link | Resource |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01 | Third Party Advisory US Government Resource |
| https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01 | Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 01:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01 - Third Party Advisory, US Government Resource |
Information
Published : 2015-06-13 18:59
Updated : 2024-11-21 01:43
NVD link : CVE-2012-4716
Mitre link : CVE-2012-4716
CVE.ORG link : CVE-2012-4716
JSON object : View
Products Affected
n-tron
- 702w_industrial_wireless_access_point
CWE
CWE-310
Cryptographic Issues