Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
BID:60810
Info
Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
| Bugtraq ID: | 60810 |
| Class: | Design Error |
| CVE: |
CVE-2013-0137 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 26 2013 12:00AM |
| Updated: | Jun 26 2013 12:00AM |
| Credit: | Mike Davis and Cesar Cerrudo of IOActive |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
Multiple Vendors EAS Devices are prone to an information-disclosure vulnerability.
Remote attackers can exploit this issue to gain access to the root SSH private key.
The following products are affected:
Digital Alert Systems DASDEC-I
Digital Alert Systems DASDEC-II
Monroe Electronics R189 One-Net
Monroe Electronics R189SE One-NetSE
Multiple Vendors EAS Devices are prone to an information-disclosure vulnerability.
Remote attackers can exploit this issue to gain access to the root SSH private key.
The following products are affected:
Digital Alert Systems DASDEC-I
Digital Alert Systems DASDEC-II
Monroe Electronics R189 One-Net
Monroe Electronics R189SE One-NetSE
Exploit / POC
Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Vendors Multiple EAS Devices Private SSH Key Information Disclosure Vulnerability
References:
References: