CVE-2012-3006 The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appl...
HighCVSS 7.1
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| innominate mguard firmware | < 7.5.0 | 7.5.0 |
References
- www.innominate.com vendor-advisory
- www.us-cert.gov broken-link third-party-advisory us-government-resource
- freedom-to-tinker.com not-applicable