A backdoor has been found in Canadian based RuggedCom's 'Rugged Operating System', providing easy access to anyone with the devices's MAC address — something often publically displayed. Rugged OS is being used in a wide range of applications, including traffic control, power generation, and even U.S. Navy bases. The backdoor was first found over a year ago, and RuggedCom have so far refused to patch out the exploit.

The exploit is trivial: each device has a permanent "factory" user, and an automatically generated password derived from the MAC.

http://arstechnica.com/business/news...ol-systems.ars
http://arstechnica.com/business/news...ol-systems.ars
Daniel Reviewed by Daniel on . Backdoor In RuggedOS Systems: Infrastructure, Military Systems Vulnerable A backdoor has been found in Canadian based RuggedCom's 'Rugged Operating System', providing easy access to anyone with the devices's MAC address — something often publically displayed. Rugged OS is being used in a wide range of applications, including traffic control, power generation, and even U.S. Navy bases. The backdoor was first found over a year ago, and RuggedCom have so far refused to patch out the exploit. The exploit is trivial: each device has a permanent "factory" user, and an Rating: 5