The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CDigital Alert Systems Dasdec Eas
HWDigital Alert Systems2.0-0≤ 2.0-1Monroe Electronics R189 One Net Eas
HWMonroe Electronics2.0-0≤ 2.0-1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References
Related vulnerabilities
CVE-2013-4732HIGH10.0ten sam produkt
The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Elec...
CVE-2013-4733HIGH7.5ten sam produkt
The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One...
CVE-2013-4734HIGH7.3ten sam produkt
dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-...
CVE-2013-4735HIGH10.0ten sam produkt
The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device be...