Sign-up

ID

VAR-201208-0742


TITLE

RuggedCom Rugged Operating System SSL Private key reuse vulnerability

Trust: 0.8

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4472

DESCRIPTION

RuggedCom is a provider of communication network solutions. The RuggedCom Rugged Operating System has an SSL private key reuse vulnerability that allows an attacker to exploit and exploit encrypted traffic. ---------------------------------------------------------------------- The new Secunia CSI 6.0 is now available in beta! Seamless integration with your existing security solutions Sign-up to become a Beta tester: http://secunia.com/csi6beta ---------------------------------------------------------------------- TITLE: RuggedCom Rugged Operating System SSL Private Key Reuse Vulnerability SECUNIA ADVISORY ID: SA50364 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50364/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50364 RELEASE DATE: 2012-08-24 DISCUSS ADVISORY: http://secunia.com/advisories/50364/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50364/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50364 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in RuggedCom Rugged Operating System, which can be exploited by malicious people to conduct spoofing attacks. SOLUTION: No official solution is currently available. PROVIDED AND/OR DISCOVERED BY: Justin W. Clarke ORIGINAL ADVISORY: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-234-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 0.81

sources: CNVD: CNVD-2012-4472 // IVD: b13fc516-1f59-11e6-abef-000c29c66e3d // PACKETSTORM: 115868

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4472

AFFECTED PRODUCTS

vendor:ruggedcommodel:rugged operating systemscope:eqversion:3.x

Trust: 0.8

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4472

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: b13fc516-1f59-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

IVD: b13fc516-1f59-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d

TYPE

Permission permission and access control errors

Trust: 0.2

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d

EXTERNAL IDS

db:CNVDid:CNVD-2012-4472

Trust: 0.8

db:SECUNIAid:50364

Trust: 0.8

db:IVDid:B13FC516-1F59-11E6-ABEF-000C29C66E3D

Trust: 0.2

db:ICS CERT ALERTid:ICS-ALERT-12-234-01

Trust: 0.1

db:PACKETSTORMid:115868

Trust: 0.1

sources: IVD: b13fc516-1f59-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4472 // PACKETSTORM: 115868

REFERENCES

url:http://secunia.com/advisories/50364/

Trust: 0.7

url:http://www.us-cert.gov/control_systems/pdf/ics-alert-12-234-01.pdf

Trust: 0.1

url:http://secunia.com/vulnerability_intelligence/

Trust: 0.1

url:http://secunia.com/advisories/secunia_security_advisories/

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

Trust: 0.1

url:http://secunia.com/csi6beta

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/personal/

Trust: 0.1

url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Trust: 0.1

url:http://secunia.com/advisories/50364/#comments

Trust: 0.1

url:https://ca.secunia.com/?page=viewadvisory&vuln_id=50364

Trust: 0.1

url:http://secunia.com/advisories/about_secunia_advisories/

Trust: 0.1

sources: CNVD: CNVD-2012-4472 // PACKETSTORM: 115868

CREDITS

Secunia

Trust: 0.1

sources: PACKETSTORM: 115868

SOURCES

db:IVDid:b13fc516-1f59-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2012-4472
db:PACKETSTORMid:115868

LAST UPDATE DATE

2022-05-17T22:52:12.953000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2012-4472date:2012-08-28T00:00:00

SOURCES RELEASE DATE

db:IVDid:b13fc516-1f59-11e6-abef-000c29c66e3ddate:2012-08-28T00:00:00
db:CNVDid:CNVD-2012-4472date:2012-08-28T00:00:00
db:PACKETSTORMid:115868date:2012-08-24T05:43:40