Published: 28/04/2012 Updated: 01/02/2022

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 855

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Subscribe to Ruggedcom Rugged Operating System

RuggedCom Rugged Operating System (ROS) 3.10.x and previous versions has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote malicious users to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.

Vulnerable Product	Search on Vulmon	Subscribe to Product
siemens ruggedcom rugged operating system

Title: Undocumented Backdoor Access to RuggedCom Devices Author: jc Organization: JC CREW Date: April 23, 2012 CVE: CVE-2012-1803 Background: RuggedCom is one of a handful of networking vendors who capitalize on the market for "Industrial Strength" and "Hardened" networking equipment You'll find their gear installed in traffic control systems, ra ...

An undocumented backdoor account exists within all released versions of RuggedCom's Rugged Operating System (ROS®) The username for the account, which cannot be disabled, is "factory" and its password is dynamically generated based on the device's MAC address Multiple attempts have been made in the past 12 months to have this backdoor removed an ...

CWE-310 http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/http://www.ruggedcom.com/productbulletin/ros-security-page/http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars http://seclists.org/fulldisclosure/2012/Apr/277 http://www.kb.cert.org/vuls/id/MAPG-8RCPEN http://www.kb.cert.org/vuls/id/889195 http://www.securityfocus.com/bid/53215 http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A https://exchange.xforce.ibmcloud.com/vulnerabilities/75120 http://www.exploit-db.com/exploits/18779 https://nvd.nist.gov https://www.exploit-db.com/exploits/18779/https://www.kb.cert.org/vuls/id/889195

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-1803

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect