CVE-2015-7923

Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.

Score

CVSS 3.0 9.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-01-30

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Weos (Westermo)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01