Is CVE-2012-3006 being actively exploited?

CVE-2012-3006 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2012-3006?

CVE-2012-3006 has a CVSS 2.0 base score of 7.1 (HIGH).

CVE-2012-3006

HIGH · CVSS 7.1EPSS 1.2%EU EUVD

The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.

Key facts

CVSS score: 7.1 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Weakness (CWE): CWE-310
EPSS score: 1.2% (67th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2012-2984)
Published: June 19, 2012
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-2984 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

innominate / eagle mguard bd-301010
innominate / eagle mguard hw-201000
innominate / mguard blade hw-104020
innominate / mguard blade hw-104050
innominate / mguard delta bd-201000
innominate / mguard delta hw-103050
innominate / mguard firmware
innominate / mguard industrial rs bd-501000
innominate / mguard industrial rs bd-501010
innominate / mguard industrial rs bd-501020
innominate / mguard industrial rs hw-105000
innominate / mguard pci bd-111010
innominate / mguard pci bd-111020
innominate / mguard pci hw-102020
innominate / mguard pci hw-102050
innominate / mguard smart bd-101010
innominate / mguard smart bd-101020
innominate / mguard smart hw-101020
innominate / mguard smart hw-101050

References

http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf(Vendor Advisory)
http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf(Broken Link, Third Party Advisory, US Government Resource)
https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs(Not Applicable)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain