CVE-2012-4687CWE-331
Post Oak Bluetooth Traffic Systems Insufficient Entropy
High · published December 8, 2012
What it is
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
The record
Technical detail
- CVSS v2.0
- 7.6 · HIGH
- Vector
- AV:N/AC:H/Au:N/C:C/I:C/A:C
- CVSS v4.0
- Not supplied
- EPSS
- 0.01547 · 74.7th percentile
- Weakness
- CWE-331 · Insufficient Entropy
- Published
- 2012-12-08T15:00Z
EPSS history
Timeline