CVE-2013-0137 The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it e...
HighCVSS 10.0
EPSS 13.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digital alert systems dasdec eas | <= 2.0-1 | No fix listed |
| digital alert systems dasdec eas | = 2.0-0 | No fix listed |
| monroe electronics r189 one-net eas | <= 2.0-1 | No fix listed |
| monroe electronics r189 one-net eas | = 2.0-0 | No fix listed |
References
- www.digitalalertsystems.com vendor-advisory
- VU#662676 third-party-advisory us-government-resource
- www.kb.cert.org
- www.kb.cert.org us-government-resource
- www.monroe-electronics.com vendor-advisory
- securityledger.com