Rugged Operating System backdoor Illegal Access Vulnerability

Release date:
Updated on:

Affected Systems:
RuggedCom Rugged Operating System 3.9.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53215

RuggedCom is a provider of communication network solutions.

The Rugged Operating System is designed with a backdoor account. The username "factory" cannot be disabled. The password is generated dynamically based on the MAC address of the device. Attackers can exploit this vulnerability to illegally access affected applications.

<* Source: jc

Link: http://www.securityfocus.com/archive/1/522467
Http://www.kb.cert.org/vuls/id/889195
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

RuggedCom
---------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.ruggedcom.com/