Description
Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tropos | Mesh OS | < 7.9.1.1 | 7.9.1.1 |
Advisories 1
- ICSA-12-297-01 Tropos Wireless Mesh Routers CISA ICS & IT advisories · Jun 6, 2025