National Cyber Awareness System

Vulnerability Summary for CVE-2012-1803

Overview

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Security Bulletin: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf

Name: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf

Hyperlink:http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf

US-CERT Vulnerability Note: VU#MAPG-8RCPEN

Name: http://www.kb.cert.org/vuls/id/MAPG-8RCPEN

Hyperlink:http://www.kb.cert.org/vuls/id/MAPG-8RCPEN

US-CERT Vulnerability Note: VU#889195

Name: VU#889195

Hyperlink:http://www.kb.cert.org/vuls/id/889195

External Source: MISC

Name: http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/

Hyperlink:http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/

External Source: BID

Name: 53215

Hyperlink:http://www.securityfocus.com/bid/53215

External Source: CONFIRM

Name: http://www.ruggedcom.com/productbulletin/ros-security-page/

Type: Advisory

Hyperlink:http://www.ruggedcom.com/productbulletin/ros-security-page/

External Source: FULLDISC

Name: 20120423 RuggedCom - Backdoor Accounts in my SCADA network? You don't say...

Hyperlink:http://seclists.org/fulldisclosure/2012/Apr/277

External Source: MISC

Name: http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars

Hyperlink:http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars

External Source: BUGTRAQ

Name: 20120423 RuggedCom - Backdoor Accounts in my SCADA network? You don't say...

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html