CVE-2012-4687
Post Oak Bluetooth Traffic Systems Insufficient Entropy
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
Exploit likelihood
What each source reports
CVE List Score used
Post Oak Bluetooth Traffic Systems Insufficient Entropy
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
- Record
CVE-2012-4687- CVSS 2.0
- 7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-331
- Updated
- 2026-11-02
EUVDEUVD-2012-4612
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
- Record
EUVD-2012-4612- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rgvp-66gg-99pp No score
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for...
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
- Record
GHSA-rgvp-66gg-99pp- Weakness
- CWE-331
- Updated
- 2026-11-02
NVD
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
- Record
CVE-2012-4687- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-331, CWE-310
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4687 is a vulnerability (CVSS 7.6) in Post Oak Traffic Systems Awam Bluetooth Reader Traffic System, published December 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.