PT-2012-3551
CVE-2012-1803
·
Publicado
2012-04-28
·
Atualizado
2022-02-01
Descrição por
CVSS 2.0
8.5
AltaMétricasAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
RuggedCom Rugged Operating System (ROS) versions 3.10.x and earlier
Description
The issue allows remote attackers to obtain access by calculating a password derived from the MAC Address field in the banner, and then establishing a session via TELNET, remote shell (rsh), or serial-console.
Recommendations
For versions 3.10.x and earlier, consider disabling remote access via TELNET, rsh, and serial-console until a fix is available. Restrict access to the factory account to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾