CVE-2012-4694: High severity moxa edr-g903 firmware vulnerability
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4694?
CVE-2012-4694 is considered a high severity vulnerability due to the risk of man-in-the-middle attacks.
How do I fix CVE-2012-4694?
To fix CVE-2012-4694, upgrade the Moxa EDR-G903 series router firmware to version 2.11 or later.
What devices are affected by CVE-2012-4694?
CVE-2012-4694 affects Moxa EDR-G903 series routers with firmware versions prior to 2.11.
What types of attacks can exploit CVE-2012-4694?
CVE-2012-4694 can be exploited for man-in-the-middle attacks, allowing attackers to spoof devices or alter data streams.
Why is the entropy issue important in CVE-2012-4694?
The insufficient entropy for SSH and SSL keys in CVE-2012-4694 reduces the randomness and security of cryptographic keys, making them easier to predict.