Vulnerability in Innominate Eagle Mguard Bd-301010
CVE-2012-3006
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Innominate Eagle_mguard_bd-301010
- Innominate Eagle_mguard_hw-201000
- Innominate Mguard_blade_hw-104020
- Innominate Mguard_blade_hw-104050
- Innominate Mguard_delta_bd-201000
- Innominate Mguard_delta_hw-103050
- Innominate Mguard_firmware
- Innominate Mguard_industrial_rs_bd-501000
- Innominate Mguard_industrial_rs_bd-501010
- Innominate Mguard_industrial_rs_bd-501020
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_MISC, Not Applicable)
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Broken Link)