CVE-2012-2441: RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the M...

Security readout for executives and security teams

Some RuggedCom industrial network devices running ROS before 3.3 included a factory account whose password could be calculated from a MAC address shown in a banner. If management services are reachable, an attacker may gain remote administrative access over SSH or HTTPS. Exposure is most likely in OT and industrial networks using RuggedCom ROS devices older than 3.3, especially where SSH or HTTPS management is reachable from untrusted networks, vendor support paths, or broader enterprise segments. Treat this as high priority for industrial environments because it can affect remote management access to critical network infrastructure. Prioritize externally reachable or poorly segmented devices first, then legacy OT segments where upgrades require maintenance windows. Mitigation focus: Inventory RuggedCom ROS devices and identify versions older than 3.3.; Upgrade to ROS 3.3 or later where vendor guidance confirms applicability.; Restrict SSH and HTTPS management access to trusted administration networks only..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.