RuggedCom.ROS.Backdoor.Access

Description

This indicates detection of a Backdoor Access in RuggedCom switches.
The vulnerability is due to a default factory account with weak cryptography used to encode its password. Remote attackers can obtain access to the device with this account via calculating the password based on the MAC address.

Affected Products

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier versions.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Please contact the vendor at the email below for firmware updates to resolve this issue.
support@ruggedcom.com

References