Innominate Security Technologies mGuard Products Insufficient Entropy Weakness

Multiple Innominate Security Technologies mGuard products are prone to a weakness in the entropy when generating keys for HTTPS and SSH.

Remote attackers can exploit this issue to perform man-in-the-middle attacks against vulnerable applications and to disclose sensitive information. Successful exploits may result in the attacker executing arbitrary code or gain unauthorized access on the affected system.

The following products are affected:

mGuard Smart
mGuard PCI
mGuard Industrial RS
mGuard Blade
mGuard Delta
EAGLE mGuard


 

Privacy Statement
Copyright 2010, SecurityFocus