Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2012-2441
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-28 Apr, 2012 | 00:55
Updated At-11 Apr, 2025 | 00:51

RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.08.5HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C
Primary2.08.5HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 8.5
Base severity: HIGH
Vector:
AV:N/AC:M/Au:S/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 8.5
Base severity: HIGH
Vector:
AV:N/AC:M/Au:S/C:C/I:C/A:C
CPE Matches
Siemens AG
siemens
>>ruggedcom_rugged_operating_system>>Versions before 3.3.0(exclusive)
cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-521Primarynvd@nist.gov
CWE ID: CWE-521
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.arscve@mitre.org
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/277cve@mitre.org
Exploit
Mailing List
Third Party Advisory
http://www.kb.cert.org/vuls/id/889195cve@mitre.org
Third Party Advisory
US Government Resource
http://www.ruggedcom.com/productbulletin/ros-security-page/cve@mitre.org
Broken Link
Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdfcve@mitre.org
Broken Link
Third Party Advisory
US Government Resource
http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/cve@mitre.org
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75244cve@mitre.org
Third Party Advisory
VDB Entry
http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.arsaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://seclists.org/fulldisclosure/2012/Apr/277af854a3a-2127-422b-91ae-364da2661108
Exploit
Mailing List
Third Party Advisory
http://www.kb.cert.org/vuls/id/889195af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
US Government Resource
http://www.ruggedcom.com/productbulletin/ros-security-page/af854a3a-2127-422b-91ae-364da2661108
Broken Link
Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdfaf854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
US Government Resource
http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75244af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
VDB Entry
Hyperlink: http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://seclists.org/fulldisclosure/2012/Apr/277
Source: cve@mitre.org
Resource:
Exploit
Mailing List
Third Party Advisory
Hyperlink: http://www.kb.cert.org/vuls/id/889195
Source: cve@mitre.org
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.ruggedcom.com/productbulletin/ros-security-page/
Source: cve@mitre.org
Resource:
Broken Link
Vendor Advisory
Hyperlink: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf
Source: cve@mitre.org
Resource:
Broken Link
Third Party Advisory
US Government Resource
Hyperlink: http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75244
Source: cve@mitre.org
Resource:
Third Party Advisory
VDB Entry
Hyperlink: http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://seclists.org/fulldisclosure/2012/Apr/277
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Mailing List
Third Party Advisory
Hyperlink: http://www.kb.cert.org/vuls/id/889195
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
US Government Resource
Hyperlink: http://www.ruggedcom.com/productbulletin/ros-security-page/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Vendor Advisory
Hyperlink: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
US Government Resource
Hyperlink: http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75244
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
VDB Entry
Change History
0Changes found
Details not found