1 results (0.005 seconds)

CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0

Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key. Westermo WeOS en versiones anteriores a 4.19.0 utiliza la misma clave SSL privada para las diferentes instalaciones de clientes, lo que facilita a atacantes man-in-the-middle vencer los mecanismos de protección criptográfica aprovechando el conocimiento de una clave. • https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01 • CWE-310: Cryptographic Issues •