20120703 Cyberoam advisorymailing list
http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html CVE-2012-3372
HIGH
Cyberoam UTM Cyberoam_SSL_CA Certificate Vulnerability
Record summary
CVE-2012-3372 has a selected CVSS score of 7.4 (high).
Description
The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jul 3, 2012 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 21, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
cyberoam_unified_threat_managementBrowse elitecore / cyberoam_unified_threat_management | VulnCheck | Version data not supplied | |
References
6blog.cyberoam.com
http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach theregister.co.uk
http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap blog.torproject.org
https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372 media.torproject.org
https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-3372