CVE-2012-4898 Tropos Wireless Mesh Routers Insufficient Entropy
MediumCVSS 6.1
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tropos mesh os | <= 7.9.1 | No fix listed |
| tropos 1310 distrubution automation mesh router | All versions | No fix listed |
| tropos 1410 mesh router | All versions | No fix listed |
| tropos 1410 wireless mesh router | All versions | No fix listed |
| tropos 3310 indoor mesh router | All versions | No fix listed |
| tropos 3320 indoor mesh router | All versions | No fix listed |
| tropos 4310 mobile mesh router | All versions | No fix listed |
| tropos 6310 mesh router | All versions | No fix listed |
| tropos 6320 mesh router | All versions | No fix listed |
| tropos mesh os | < 7.9.1.1 | 7.9.1.1 |
References
- www.cisa.gov
- www.us-cert.gov us-government-resource