GCVE - cpe:2.3:o:innominate:mguard_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:innominate:mguard_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Innominate (`58a03348-c56a-568c-87f2-9e7fe70bed87`)
Product	Mguard Firmware (`1ed86680-4e19-55de-8d43-1599a93355f9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9193`	vulnerable	2026-06-03 14:34:26.215007	Innominate mGuard Improper Privilege Management Innominate mGuard with firmware before 7.6.6 and 8.x before 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting. Published: 2014-12-20T00:00:00.000Z Updated: 2025-07-28T20:35:16.302Z Open on db.gcve.eu Reference links http://www.innominate.com/data/downloads/software/innominate_security_advisory_20141217_001_en.pdf https://www.cisa.gov/news-events/ics-advisories/icsa-14-352-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2356`	vulnerable	2026-06-03 14:33:50.699682	Innominate mGuard Exposure of Sensitive Information to an Unauthorized Actor Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request. Published: 2014-07-30T14:00:00.000Z Updated: 2025-10-03T17:08:22.828Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3006`	vulnerable	2026-06-03 14:31:56.274119	Details available The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value. Published: 2012-06-19T18:00:00.000Z Updated: 2024-09-16T23:11:27.552Z Open on db.gcve.eu Reference links https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.