CVE-2012-4698

CVE-2012-4698 describes a vulnerability in Siemens RuggedCom Rugged Operating System (ROS) and related ROX/RuggedMax OS versions, where hardcoded private keys are used for SSL and SSH communication. This flaw allows man-in-the-middle attackers to spoof servers and decrypt network traffic due to the keys being universally available across all customer installations. With a CVSS score of 4.3 (Medium), the vulnerability requires medium attack complexity (AC:M) but can be exploited remotely without authentication (AV:N/Au:N), potentially leading to information disclosure (C:P). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.