Security Advisories

In our research, we identified and contacted 54 companies that manufacture devices that appear to be vulnerable. Several of these companies have since shipped updates or customer advisories.

We have been informed of the following security advisories:

• Innominate:
  • Security Advisory 2012-06-14-001
  • ICS-CERT Advisory: ICSA-12-167-01—INNOMINATE MGUARD WEAK HTTPS AND SSH KEYS
• Intel:
  • INTEL-SA-00031: Low Entropy RSA Issue in Intel EPSD Baseboard Management Controller (BMC) Firmware
• Juniper Networks:
  • PSN-2012-04-549 - 2012-04 Security Bulletin: Junos: Weakness in generation of self-signed certificates for use in device administration*
  • PSN-2012-07-638 - Juniper SIRT Out-of-Cycle Security Notice: Weak Keys on Juniper Products Fixed Previously*

* Only available to entitled customers.

To be added to this list, please email us with your update at factorable@umich.edu.