CVE-2012-4687 — Post Oak Bluetooth Traffic Systems Insufficient Entropy

CVE-2012-4687

Post Oak Bluetooth Traffic Systems Insufficient Entropy PUBLISHED

Description (CNA)

Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.

Affected (CNA)

Vendor / product	Versions
Post Oak Traffic Systems / AWAM Bluetooth Reader Traffic System	affected All versions

CWE

CWE-331

References

https://www.cisa.gov/news-events/ics-advisories/icsa-12-335-01
http://www.postoaktraffic.com/contact.aspx

ADP enrichment

CVE

No English description supplied.

http://www.us-cert.gov/control_systems/pdf/ICSA-12-335-01.pdf