CVE Catalog
CVE-2015-7923
CriticalSummary
Westermo WeOS before version 4.19.0 uses the same SSL private key across different customers' installations, making it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
Risk Assessment
The use of a shared private key increases the risk of communication interception and data confidentiality breaches within the organization.
Recommendation
It is recommended to upgrade to WeOS version 4.19.0 or later to ensure unique private keys for each installation.
Original NVD description (English source)
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.