CVE:CVE-2012-4898
CNNVD:CNNVD-201212-167
Mesh网络即”无线网格网络”,它是一个无线多跳网络。
基于Tropos无线网状路由器上的Mesh OS 7.9.1.1之前版本中存在漏洞，该漏洞源于程序没有对SSH密钥使用充分资源的熵。通过对来自别处的产品安装的密钥信息加以利用，中间人攻击者利用该漏洞欺骗设备或修改主从架构数据流。
solution:Upgrade tropos mesh_os to a higher version than 7.9.1,and avoid the version (,7.9.1]; Upgrade tropos 1310_distrubution_automation_mesh_router to a higher version than -; Upgrade tropos 1410_mesh_router to a higher version than -; Upgrade tropos 1410_wireless_mesh_router to a higher version than -; Upgrade tropos 3310_indoor_mesh_router to a higher version than -; Upgrade tropos 3320_indoor_mesh_router to a higher version than -; Upgrade tropos 4310_mobile_mesh_router to a higher version than -; Upgrade tropos 6310_mesh_router to a higher version than -; Upgrade tropos 6320_mesh_router to a higher version than -