CVE-2012-4687 Post Oak Bluetooth Traffic Systems Insufficient Entropy
HighCVSS 7.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postoaktraffic awam bluetooth reader | All versions | No fix listed |
| Post Oak Traffic Systems AWAM Bluetooth Reader Traffic System | = All versions | No fix listed |
References
- www.postoaktraffic.com
- www.cisa.gov
- www.us-cert.gov us-government-resource