CVE:CVE-2012-4698
CNNVD:CNNVD-201212-325
Siemens RuggedCom Rugged Operating System (ROS) 3.12之前版本、ROX I OS 1.14.5之前版本、ROX II OS 2.3.0之前版本、RuggedMax OS 4.2.1.4621.22之前版本中存在漏洞，该漏洞源于程序对SSL和SSH通信使用了硬编码私钥。通过对所有用户所安装的ROS文件中的密钥可用性加以利用，中间人攻击者利用该漏洞欺骗服务器并破解网络流量。
solution:Upgrade siemens ros to a higher version than 3.11.0,and avoid the version (,3.11.0]; Upgrade siemens rox_i_os to a higher version than 1.14.5,and avoid the version (,1.14.5]; Upgrade siemens rox_ii_os to a higher version than 2.3.0,and avoid the version (,2.3.0]; Upgrade siemens ruggedmax_os to a higher version than 4.2.1.4621.22,and avoid the version (,4.2.1.4621.22]