CVE-2012-4898

Published: Dec 18, 2012Modified: Apr 29, 2026

6.1

Vector

AV:N/AC:H/Au:N/C:C/I:P/A:N

Exploitability: 4.9 / Impact: 7.8

Source: NVD

Description

Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

Affected (9)

Products: Tropos: Mesh Os, 1310 Distrubution Automation Mesh Router, 1410 Mesh Router, 1410 Wireless Mesh Router, 3310 Indoor Mesh Router, 3320 Indoor Mesh Router, 4310 Mobile Mesh Router, 6310 Mesh Router, 6320 Mesh Router

Tropos

9 products

Mesh Os

1310 Distrubution Automation Mesh Router

1410 Mesh Router

1410 Wireless Mesh Router

3310 Indoor Mesh Router

3320 Indoor Mesh Router

4310 Mobile Mesh Router

6310 Mesh Router

6320 Mesh Router

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Tropos Mesh Os	version ≤ 7.9.1
Tropos 1310 Distrubution Automation Mesh Router	All versions
Tropos 1410 Mesh Router	All versions
Tropos 1410 Wireless Mesh Router	All versions
Tropos 3310 Indoor Mesh Router	All versions
Tropos 3320 Indoor Mesh Router	All versions
Tropos 4310 Mobile Mesh Router	All versions
Tropos 6310 Mesh Router	All versions
Tropos 6320 Mesh Router	All versions

Related CWEs

CWE-310

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-12-297-01

Source: ics-cert@hq.dhs.gov

http://www.us-cert.gov/control_systems/pdf/ICSA-12-297-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.