CVE-2015-7923 Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms...
CriticalCVSS 9.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| westermo weos | = 4.18.0 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource