VULNERABILITY INTELLIGENCE
CVE-2012-1803
CVSS score8.5 HIGH
EPSS probability49.01%
CISA KEVNot currently listed
Published2012-04-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.
Primary references
- cret@cert.org — Broken Link
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Exploit, Mailing List, Third Party Advisory
- cret@cert.org — Exploit, Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Broken Link, Vendor Advisory
- cret@cert.org — Third Party Advisory, VDB Entry
- cret@cert.org — Broken Link, Third Party Advisory, US Government Resource
- cret@cert.org — Third Party Advisory
- cret@cert.org — Third Party Advisory, VDB Entry