CVE-2012-3372: High severity elitecore cyberoam unified threat management vulnerability
DISPUTED The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the CyberoamSSLCA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3372?
CVE-2012-3372 is considered to have a medium severity due to the potential for man-in-the-middle attacks.
What are the potential risks of CVE-2012-3372?
The risks include unauthorized interception and manipulation of SSL traffic due to the shared certificate and private key.
How does CVE-2012-3372 affect Cyberoam UTM appliances?
CVE-2012-3372 affects Cyberoam UTM appliances by allowing attackers easier access to spoof SSL servers.
How do I fix CVE-2012-3372?
To mitigate CVE-2012-3372, update the Cyberoam UTM configuration to use unique certificates for each installation.
Is CVE-2012-3372 still a concern for current Cyberoam UTM users?
Yes, CVE-2012-3372 remains a concern for users who have not updated their configurations to prevent certificate sharing.