CVE-2012-1803
CVE-2012-1803 is a high-severity vulnerability in Siemens Ruggedcom Rugged Operating System with a CVSS 2.0 base score of 8.5. Its EPSS exploit-prediction score of 49% places it in the 99th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-310.
Key facts
- Severity: High (CVSS 2.0 base score 8.5)
- EPSS exploit prediction: 49% (99th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-310
- Affected product: Siemens Ruggedcom Rugged Operating System
- Published:
- Last modified:
Description
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.
Frequently asked questions
- What is CVE-2012-1803?
- RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) TELNET, (2) remote shell (aka rsh), or (3) serial-console session.
- How severe is CVE-2012-1803?
- CVE-2012-1803 has a CVSS 2.0 base score of 8.5, rated high severity.
- Is CVE-2012-1803 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 49% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2012-1803?
- CVE-2012-1803 affects Siemens Ruggedcom Rugged Operating System. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2012-1803?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2012-1803 published?
- CVE-2012-1803 was published on 2012-04-28 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/bugtraq/2012-04/0186.html
- http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.ars
- http://ics-cert.us-cert.gov/advisories/ICSA-12-146-01A
- http://seclists.org/fulldisclosure/2012/Apr/277
- http://www.exploit-db.com/exploits/18779
- http://www.kb.cert.org/vuls/id/889195
- http://www.kb.cert.org/vuls/id/MAPG-8RCPEN
- http://www.ruggedcom.com/productbulletin/ros-security-page/
- http://www.securityfocus.com/bid/53215
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdf
- http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75120
Affected products (1)
- cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*
More vulnerabilities in Siemens Ruggedcom Rugged Operating System
- CVE-2012-2441 — High (CVSS 8.5): RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address…
- CVE-2013-6925 — High (CVSS 8.3): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by…
- CVE-2013-6926 — High (CVSS 8.0): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended…
- CVE-2014-1966 — High (CVSS 7.8): The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0…
- CVE-2014-2590 — Medium (CVSS 5.0): The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS…
- CVE-2015-6675 — Medium (CVSS 4.3): Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers…
All CVEs affecting Siemens Ruggedcom Rugged Operating System →
Other CWE-310 (Cryptographic Issues) vulnerabilities
- CVE-2014-7878 — Critical (CVSS 10.0): The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived…
- CVE-2013-3712 — Critical (CVSS 10.0): SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has…
- CVE-2013-6952 — Critical (CVSS 10.0): The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote…
- CVE-2013-6838 — Critical (CVSS 10.0): An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000)…
- CVE-2013-0137 — Critical (CVSS 10.0): The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189…
- CVE-2011-5123 — Critical (CVSS 10.0): The Antivirus component in Comodo Internet Security before 5.3.175888.1227 does not check whether X.509 certificates in…