« Volver al listado

CVE-2012-3372

Estado: ModificadaAlta (7.4)—

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Elitecore — Cyberoam Unified Threat Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3372",
  "cveTags": [
    {
      "tags": [
        "disputed"
      ],
      "sourceIdentifier": "secalert@redhat.com"
    }
  ],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2012-3372",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-21T19:32:24.195135Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-09T10:20:44.417",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities.  NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key."
    },
    {
      "lang": "es",
      "value": "** EN DISPUTA ** La configuración por defecto del dispositivo Cyberoam UTM utiliza la misma clave privada en distintas instalaciones de clientes, lo que que facilita a atacantes MITM (man-in-the-Middle u hombre-en-medio) a espiar servidores SSL aprovechando la presencia del certificado Cyberoam_SSL_CA en una lista de confianza de autoridades emisoras de certificados raíz. NOTA: el vendedor se opone a la importancia de esta cuestión, porque el dispositivo \"no permite la importación o exportación de la mencionada clave privada\""
    }
  ],
  "lastModified": "2026-06-16T23:43:05.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:elitecore:cyberoam_unified_threat_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F6D1E67-3012-4230-AAA8-3770ADC6BD0C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}