CVE-2012-3039 : Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of en

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.

Published 2013-08-09 23:55:02

Updated 2013-08-12 19:28:59

Source ICS-CERT

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2012-3039

EPSS FAQ

0.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 55 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-3039

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.1	HIGH	AV:N/AC:H/Au:S/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Network Access Complexity: High Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Products affected by CVE-2012-3039

Moxa » Oncell Gateway Firmware
Versions up to, including, (<=) 1.3
cpe:2.3:o:moxa:oncell_gateway_firmware:*:*:*:*:*:*:*:*
Matching versions
Moxa » Oncell Gateway G3111 » Version: N/A
cpe:2.3:h:moxa:oncell_gateway_g3111:-:*:*:*:*:*:*:*
Matching versions
Moxa » Oncell Gateway G3151 » Version: N/A
cpe:2.3:h:moxa:oncell_gateway_g3151:-:*:*:*:*:*:*:*
Matching versions
Moxa » Oncell Gateway G3211 » Version: N/A
cpe:2.3:h:moxa:oncell_gateway_g3211:-:*:*:*:*:*:*:*
Matching versions
Moxa » Oncell Gateway G3251 » Version: N/A
cpe:2.3:h:moxa:oncell_gateway_g3251:-:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2012-3039

Exploit prediction scoring system (EPSS) score for CVE-2012-3039

CVSS scores for CVE-2012-3039

CWE ids for CVE-2012-3039

References for CVE-2012-3039

Products affected by CVE-2012-3039