{"id":"CVE-2012-3039","aliases":["EUVD-2012-3017","GHSA-rf95-4x65-x5hr"],"status":"published","title":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a...","description":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.","severity":{"version":"2.0","score":7.1,"vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01392,"percentile":0.72539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2013-08-09T23:00:00Z","modified":"2026-06-16T23:42:32Z","products":[{"vendor":"moxa","product":"oncell_gateway_firmware"},{"vendor":"moxa","product":"oncell_gateway_g3111"},{"vendor":"moxa","product":"oncell_gateway_g3151"},{"vendor":"moxa","product":"oncell_gateway_g3211"},{"vendor":"moxa","product":"oncell_gateway_g3251"}],"references":[{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-13-217-01","tags":["x_refsource_MISC","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3039"},{"url":"https://github.com/advisories/GHSA-rf95-4x65-x5hr"}],"sources":{"cve":[{"id":"CVE-2012-3039","description":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.","status":"published","published":"2013-08-09T23:00:00Z","modified":"2024-09-17T04:13:42.635Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3017","description":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.","status":"published","published":"2013-08-09T23:00:00Z","modified":"2024-09-17T04:13:42Z","updated_at":"2026-11-03T00:28:25.314109Z"}],"ghsa":[{"id":"GHSA-rf95-4x65-x5hr","title":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a...","description":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.","status":"published","published":"2022-05-17T05:07:02Z","modified":"2023-01-28T05:03:16Z","updated_at":"2026-11-02T14:43:56.576463Z"}],"nvd":[{"id":"CVE-2012-3039","description":"Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere.","status":"published","published":"2013-08-09T23:55:02.427Z","modified":"2026-06-16T23:42:32.917Z","cvss":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:17.375282Z"}]}}