Vulnerability in Moxa Edr-G903
CVE-2012-4694
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.
Affected products
- Moxa Edr-g903
- Moxa Edr_g903_firmware — versions 1.0, 2.0, 2.1
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)
- ics-cert@hq.dhs.gov (x_refsource_CONFIRM)