Backdoor In RuggedOS Systems: Infrastructure, Military Systems Vulnerable 154
Posted
by
Unknown Lamer
from the steal-me-up-some-electricity dept.
from the steal-me-up-some-electricity dept.
FhnuZoag writes "A backdoor has been found in Canadian based RuggedCom's 'Rugged Operating System', providing easy access to anyone with the devices's MAC address — something often publically displayed. Rugged OS is being used in a wide range of applications, including traffic control, power generation, and even U.S. Navy bases. The backdoor was first found over a year ago, and RuggedCom have so far refused to patch out the exploit."
The exploit is trivial: each device has a permanent "factory" user, and an automatically generated password derived from the MAC.
Re:Nothing is 100% secure. (Score:5, Funny)
Re:Nothing is 100% secure. (Score:5, Funny)
Never play cards with a man called Doc. Never eat at a place called Mom's. Never sleep with a woman whose troubles are worse than your own.
Never trust an OS with the 'Rugged' in it's name.
Re:Whois JC CREW? (Score:5, Funny)
Their website had a default password, sorry, couldn't help myself.
Re:This word, "rugged" (Score:5, Funny)
It means "covered with carpet", right?
Re:Nothing is 100% secure. (Score:4, Funny)
Hmmm....I happen to have some iocane here....care to partake in a battle of wits?
It was a typo. (Score:5, Funny)
Re:Nothing is 100% secure. (Score:2, Funny)
Or let's just say Beardo forgot the password. "Oh, I think it was a seven-digit prime number... I don't think I wrote that down anywhere..."
Why on earth would he set the password to 8675309? That's just silly.
Re:Nothing is 100% secure. (Score:5, Funny)
Never say never