CVE-2012-2441

RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a (1) SSH or (2) HTTPS session, a different vulnerability than CVE-2012-1803.

• CWE-521

• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.arsThird Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/277Exploit, Mailing List, Third Party Advisory
• http://www.kb.cert.org/vuls/id/889195Third Party Advisory, US Government Resource
• http://www.ruggedcom.com/productbulletin/ros-security-page/Broken Link, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdfBroken Link, Third Party Advisory, US Government Resource
• http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75244Third Party Advisory, VDB Entry
• http://arstechnica.com/business/news/2012/04/backdoor-in-mission-critical-hardware-threatens-power-traffic-control-systems.arsThird Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/277Exploit, Mailing List, Third Party Advisory
• http://www.kb.cert.org/vuls/id/889195Third Party Advisory, US Government Resource
• http://www.ruggedcom.com/productbulletin/ros-security-page/Broken Link, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-116-01A.pdfBroken Link, Third Party Advisory, US Government Resource
• http://www.wired.com/threatlevel/2012/04/ruggedcom-backdoor/Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75244Third Party Advisory, VDB Entry

Published

Apr 28, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2435Directory traversal vulnerability in the captcha module in P…
• CVE-2012-2436Multiple cross-site scripting (XSS) vulnerabilities in Pligg…
• CVE-2012-2437cookie_gen.php in ar web content manager (AWCM) 2.2 does not…
• CVE-2012-2438ar web content manager (AWCM) 2.2 does not restrict the numb…
• CVE-2012-2439The default configuration of the NETGEAR ProSafe FVS318N fir…
• CVE-2012-2440The default configuration of the TP-Link 8840T router enable…
• CVE-2012-2442Buffer overflow in the Video Manager in Nokia PC Suite 7.1.1…
• CVE-2012-2446Cross-site scripting (XSS) vulnerability in tools/local_look…
• CVE-2012-2447Cross-site request forgery (CSRF) vulnerability in accountmg…
• CVE-2012-2448VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow re…
• CVE-2012-2449VMware Workstation 8.x before 8.0.3, VMware Player 4.x befor…
• CVE-2012-2450VMware Workstation 8.x before 8.0.3, VMware Player 4.x befor…