{"schemaVersion":3,"id":"CVE-2012-1803","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.","dates":{"published":"2012-04-28T00:00:00.000Z","modified":"2024-08-06T19:08:38.545Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":8.5,"severity":"high","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.49009,"percentile":0.98873,"severity":"high","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.49009},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.49009,"percentile":0.98873}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.49009,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.49009,"percentile":0.98873}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_68838F26B5A7D214","name":"Exploit Reference (seclists.org)","source":"reference","url":"http://seclists.org/fulldisclosure/2012/Apr/277","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"18779","name":"RuggedCom Devices - Backdoor Access","source":"exploit-database","url":"https://www.exploit-db.com/exploits/18779","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["hardware"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"hardware","file":"exploits/hardware/remote/18779.txt","codes":["CVE-2012-2441","OSVDB-81406","CVE-2012-1803"]},"metasploit":null},{"id":"MSF_AUXILIARY_SCANNER_TELNET_TELNET_RUGGEDCOM","name":"RuggedCom Telnet Password Generator","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/telnet_ruggedcom.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":true,"exploitdb":null,"metasploit":{"fullname":"auxiliary/scanner/telnet/telnet_ruggedcom","rank":"300","rankName":"normal","postAuth":true,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":3,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"siemens","product":"ruggedcom_rugged_operating_system","name":"ruggedcom rugged operating system","label":"ruggedcom_rugged_operating_system","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.2.0, ≤ 3.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.2.0, ≤ 3.10.1","eol":null,"hubHref":"/vendor/siemens/ruggedcom_rugged_operating_system"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/","label":"www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/","hostname":"www.wired.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/18779","label":"www.exploit-db.com/exploits/18779","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75120","label":"exchange.xforce.ibmcloud.com/vulnerabilities/75120","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/889195","label":"www.kb.cert.org/vuls/id/889195","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html","label":"archives.neohapsis.com/archives/bugtraq/2012-04/0186.html","hostname":"archives.neohapsis.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link"]},{"url":"http://www.ruggedcom.com/productbulletin/ros-security-page/","label":"www.ruggedcom.com/productbulletin/ros-security-page/","hostname":"www.ruggedcom.com","tags":["X Refsource CONFIRM","Broken Link","Vendor Advisory"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf","label":"www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf","hostname":"www.us-cert.gov","tags":["X Refsource MISC","Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-8RCPEN","label":"www.kb.cert.org/vuls/id/MAPG-8RCPEN","hostname":"www.kb.cert.org","tags":["X Refsource CONFIRM","Third Party Advisory","US Government Resource"]},{"url":"http://seclists.org/fulldisclosure/2012/Apr/277","label":"seclists.org/fulldisclosure/2012/Apr/277","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Exploit","Third Party Advisory"]},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A","label":"ics-cert.us-cert.gov/advisories/ICSA-12-146-01A","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","Third Party Advisory","US Government Resource"]},{"url":"http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars","label":"arstechnica.com/business/…","hostname":"arstechnica.com","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/53215","label":"www.securityfocus.com/bid/53215","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2012-04-28T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T19:08:38.545Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":54,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:24:11.080Z","stale":false,"partial":false}}