CVE-2013-0137

The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session.

• CWE-310

• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7H
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory
• https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable/
• http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/662676US Government Resource
• http://www.kb.cert.org/vuls/id/AAMN-98MU7H
• http://www.kb.cert.org/vuls/id/AAMN-98MUK2US Government Resource
• http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfVendor Advisory
• https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable/

Published

Jun 30, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0131Buffer overflow in the NVIDIA GPU driver before 304.88, 310.…
• CVE-2013-0132The suexec implementation in Parallels Plesk Panel 11.0.9 co…
• CVE-2013-0133Untrusted search path vulnerability in /usr/local/psa/admin/…
• CVE-2013-0134Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2013-0135Multiple SQL injection vulnerabilities in PHP Address Book 8…
• CVE-2013-0136Multiple directory traversal vulnerabilities in the EditDocu…
• CVE-2013-0138BitZipper 2013 before Update 1 allows remote attackers to ex…
• CVE-2013-0139The Arecont Vision AV1355DN MegaDome camera allows remote at…
• CVE-2013-0140SQL injection vulnerability in the Agent-Handler component i…
• CVE-2013-0141Directory traversal vulnerability in McAfee ePolicy Orchestr…
• CVE-2013-0142QNAP VioStor NVR devices with firmware 4.0.3, and the Survei…
• CVE-2013-0143cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmwa…