CVE-2012-4694

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for…

published February 15, 2013

CVSS
—
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.3th percentile
Published
2013-02-15T11:00Z
EPSS history
Timeline
  • 15 FEB 11:00Z
    Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for…
    cvelistv5