CVE-2012-4687
Post Oak Bluetooth Traffic Systems Insufficient Entropy
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High7.6 | AV:N/AC:H/Au:N/C:C/I:C/A:C |
| NVDNVD · Modified | 2.0 | High7.6 | AV:N/AC:H/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 1.5% · top 25% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.6.
Weakness
Affected products
Post Oak Traffic Systems · AWAM Bluetooth Reader Traffic System
- affected All versions
What to do
Solution: Post Oak has developed a patch for the AWAM Bluetooth Reader Traffic System that mitigates the vulnerability. The patch allows the Bluetooth reader to ensure sufficient entropy exists before generating host and authentication keys. The patch will be installed on all new devices when initially configured. Existing equipment will be patched by remote access and upgraded to the latest firmware. System owners are encouraged to contact Post Oak Traffic Systems, [email protected], (281) 381-2887. with questions patching their systems.
References (3)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .