Vulnerability Description
N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| N-Tron | 702W Industrial Wireless Access Point | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-160-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2012-4716?
CVE-2012-4716 is a vulnerability with a CVSS score of 8.8 (HIGH). N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat cr...
How severe is CVE-2012-4716?
CVE-2012-4716 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4716?
Check the references section above for vendor advisories and patch information. Affected products include: N-Tron 702W Industrial Wireless Access Point.