CVE-2012-4898 - CVE House
Back to Database
Status published Medium CVE-2012-4898

Tropos Wireless Mesh Routers Insufficient Entropy

Vulnerability Description

Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-4898

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • research group composed of Nadia Heninger (University of California at San Diego), Zakir Durumeric (University of Michigan), Eric Wustrow (University of Michigan), and J. Alex Halderman (University of Michigan)

References

Affected Vendor

Affected Software

Mesh OS
Vulnerable Versions:
0

Timeline

Official Publish: December 18th, 2012
Last Modified: July 9th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.