Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title Embedded devices use non-unique X.509 certificates and SSH host keys
Informations
Name VU#566724 First vendor Publication 2015-11-25
Vendor VU-CERT Last vendor Modification 2015-12-17
Severity (Vendor) N/A Revision M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Original Source

Url : http://www.kb.cert.org/vuls/id/566724

CWE : Common Weakness Enumeration

% Id Name
40 % CWE-200 Information Exposure
20 % CWE-798 Use of Hard-coded Credentials (CWE/SANS Top 25)
20 % CWE-310 Cryptographic Issues
20 % CWE-295 Certificate Issues

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 1
Os 1
Os 2
Os 2
Os 2
Os 2
Os 1
Os 3
Os 3
Os 6
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 5
Os 1
Os 1
Os 1
Os 1
Os 5
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2017-10-12 21:25:19
  • Multiple Updates
2017-09-28 09:24:45
  • Multiple Updates
2017-09-26 05:25:09
  • Multiple Updates
2017-09-12 21:25:35
  • Multiple Updates
2017-08-30 00:25:11
  • Multiple Updates
2015-12-17 17:23:01
  • Multiple Updates
2015-12-01 21:23:04
  • Multiple Updates
2015-12-01 17:22:43
  • Multiple Updates
2015-11-25 17:24:12
  • First insertion