AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-3372

HIGH · CVSS 7.4 EPSS 0.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-09 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.4. See the original NVD description below for full technical details.

CVE
CVE-2012-3372
Severity
HIGH
CVSS
7.4
EPSS
0.94%

Original NVD Description

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.