CVE-2012-4694
15.02.2013, 12:09
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.Enginsight
| Vendor | Product | Version |
|---|---|---|
| moxa | edr_g903_firmware | 𝑥 ≤ 2.2 |
| moxa | edr_g903_firmware | 1.0 |
| moxa | edr_g903_firmware | 2.0 |
| moxa | edr_g903_firmware | 2.1 |
| moxa | edr-g903 | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration