CVE-2012-3006

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.

• CWE-310

• http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdfBroken Link, Third Party Advisory, US Government Resource
• https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qsNot Applicable
• http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdfBroken Link, Third Party Advisory, US Government Resource
• https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qsNot Applicable

Published

Jun 19, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3000Multiple SQL injection vulnerabilities in sam/admin/reports/…
• CVE-2012-3001Mutiny Standard before 4.5-1.12 allows remote attackers to e…
• CVE-2012-3002The web interface on (1) Foscam and (2) Wansview IP cameras …
• CVE-2012-3003Open redirect vulnerability in an unspecified web applicatio…
• CVE-2012-3004Multiple untrusted search path vulnerabilities in RealFlex R…
• CVE-2012-3005Untrusted search path vulnerability in Invensys Wonderware I…
• CVE-2012-3007Stack-based buffer overflow in slssvc.exe before 58.x in Inv…
• CVE-2012-3008Stack-based buffer overflow in OSIsoft PI OPC DA Interface b…
• CVE-2012-3009Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Pat…
• CVE-2012-3010rifsrvd.exe in the Remote Interface Service in GE Intelligen…
• CVE-2012-3011Directory traversal vulnerability in the web server in Fulte…
• CVE-2012-3012The Arbiter Power Sentinel 1133A device with firmware before…