CVE-2012-1803: siemens ruggedcom_rugged_operating_system Cryptographic Issues

CVSS: 8.5v2.0HighModified

Published 28-04-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-1803 is a high (CVSS 8.5) Cryptographic Issues vulnerability in siemens ruggedcom_rugged_operating_system. EPSS estimates a 49.01% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

54/100

0100

High · default modelHow is this calculated?

CVSS score

8.5/10

010

High · v2.0 (NVD)

EPSS score

49.01%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database, metasploit

Timeline

28-04-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.

CVSS metrics

1 score · 1 source · 1 version

v2.08.5

EPSS trend

Probability

49.01%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 49.01% on 20-09-2026

20-09-202620-10-2026

EPSS score

49.01%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
exploit-databaseremotehardwareUnverified
RuggedCom Devices - Backdoor Access
Maturity: poc
MetasploitremoteUnverified
RuggedCom Telnet Password Generator
auxiliary/scanner/telnet/telnet_ruggedcom
Maturity: poc

Weaknesses

CWE · root cause

CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.

Affected systems

Siemens1 product

ruggedcom_rugged_operating_system≥ 3.2.0, ≤ 3.10.1

1 vendor · 1 product

References

12 links

www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/X Refsource MISCThird Party Advisory
www.exploit-db.com/exploits/18779ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/75120VDB EntryX Refsource XFThird Party Advisory
www.kb.cert.org/vuls/id/889195Third Party AdvisoryX Refsource CERT VNUS Government Resource
archives.neohapsis.com/archives/bugtraq/2012-04/0186.htmlMailing ListX Refsource BUGTRAQBroken Link
www.ruggedcom.com/productbulletin/ros-security-page/X Refsource CONFIRMBroken LinkVendor Advisory
www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdfX Refsource MISCBroken LinkThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/MAPG-8RCPENX Refsource CONFIRMThird Party AdvisoryUS Government Resource
seclists.org/fulldisclosure/2012/Apr/277Mailing ListX Refsource FULLDISCExploitThird Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-12-146-01AX Refsource MISCThird Party AdvisoryUS Government Resource

Show all 12 references

arstechnica.com/business/…X Refsource MISCThird Party Advisory
www.securityfocus.com/bid/53215VDB EntryX Refsource BIDThird Party Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities