CVE-2012-4898
Medium
Description
Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
SeverityMedium
CVSS6.1
Exploit probability—
ProductTropos Mesh Os
PublishedDec 18, 2012
First seenDec 18, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tropos mesh_os | v ≤ 7.9.1 | — |
| tropos 1310_distrubution_automation_mesh_router | No range specified | — |
| tropos 1410_mesh_router | No range specified | — |
| tropos 1410_wireless_mesh_router | No range specified | — |
| tropos 3310_indoor_mesh_router | No range specified | — |
| tropos 3320_indoor_mesh_router | No range specified | — |
| tropos 4310_mobile_mesh_router | No range specified | — |
| tropos 6310_mesh_router | No range specified | — |
| tropos 6320_mesh_router | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.