{"schemaVersion":3,"id":"CVE-2012-3006","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.","dates":{"published":"2012-06-19T18:00:00.000Z","modified":"2024-09-16T23:11:27.552Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.1,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.1,"severity":"high","vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01177,"percentile":0.67345,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.01177},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.01177,"percentile":0.67345}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01177,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.01177,"percentile":0.67345}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"innominate","product":"mguard_firmware","name":"mguard firmware","label":"mguard_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 7.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0","eol":null,"hubHref":"/vendor/innominate/mguard"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs","label":"freedom-to-tinker.com/blog/…","hostname":"freedom-to-tinker.com","tags":["X Refsource MISC","Not Applicable"]},{"url":"http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf","label":"www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf","hostname":"www.innominate.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf","label":"www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf","hostname":"www.us-cert.gov","tags":["X Refsource MISC","Broken Link","Third Party Advisory","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2012-06-19T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T23:11:27.552Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T19:24:55.669Z","stale":false,"partial":false}}