NVD

Id
44683  
Name
CVE-2012-3006  
Description
The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-06-19  
Modified Date
2012-06-20  
Seq
2012-3006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224241 44683 CVE-2012-3006 http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf  View
224242 44683 CVE-2012-3006 http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf  View
224243 44683 CVE-2012-3006 https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27099 JVNDB-2012-002806 複数の Innominate Security Technologies 社の製品における HTTPS または SSH サーバになりすまされる脆弱性 複数の Innominate Security Technologies 社の製品は、秘密鍵に対して十分なエントロピーを使用していないため、(1) HTTPS または (2) SSH サーバになりすまされる脆弱性が存在します。 CVE-2012-3006 56244 CVE-2012-3006 44683 7.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002806.html 2012-06-14 2012-06-21 View