CVE Vulnerabilities

CVE-2012-4898

Published: Dec 18, 2012 | Modified: Jan 29, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.1 MEDIUM
AV:N/AC:H/Au:N/C:C/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

Affected Software

Name Vendor Start Version End Version
Mesh_os Tropos * 7.9.1 (including)

References