CVE-2012-4694
N/A
Published: February 15, 2013 at 11:00 AM UTC
Updated: June 16, 2026 at 11:45 PM UTC
2 products affected across 1 vendorEDR G903EDR G903 Firmware
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (2)
x_refsource_MISCUS Government Resource
Source: [email protected]
http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdfx_refsource_CONFIRM
Source: [email protected]
http://www.moxa.com/support/download.aspx?type=support&id=492Quick Info
StatusMODIFIED
CWE
CWE-310
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card