Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.
This public preview summarizes the normalized record without exposing paid citation paths. Use it to decide whether the device deserves a paid report, workspace review, or direct source verification.
Public pages show source names and record counts. Paid reports unlock source URLs, citation paths, and report-generation context.
For records that need deeper review, use the main access flow to request source-backed report context, saved workspace review, or support before relying on the public preview.
Security records are triage intelligence and should be validated against asset inventory, firmware versions, compensating controls, and vendor advisories.
Prioritize known exploited and high-confidence records.
Check support and vulnerability signals before purchase.
Use reports and monitors for customer device review.
Paid reports include citation paths and report-generation context; public previews intentionally hide source URLs.