CVE-2017-17428

EPSS 14.56%
Veröffentlicht 05.03.2018 18:29:00
Zuletzt bearbeitet 21.11.2024 03:17:55
Erkennungen
Login

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 8

NVD 19 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cavium ≫ Nitrox Ssl Sdk Version <= 6.1.0

Cavium ≫ Nitrox V Ssl Sdk Version <= 1.2

Cavium ≫ Octeon Sdk Version <= 1.7.2

Cavium ≫ Octeon Ssl Sdk Version <= 1.5.0

Cavium ≫ Turbossl Sdk Version <= 1.0

Cisco ≫ Webex Conect Im Version 7.24.1

Cisco ≫ Webex Meetings Version t31

Cisco ≫ Webex Meetings Version t32

Cisco ≫ Ace4710 Application Control Engine Firmware Version 3.0(0)a5(2.0)

Cisco ≫ Ace 4710 Application Control Engine Version -

Cisco ≫ Ace4710 Application Control Engine Firmware Version 3.0(0)a5(3.0)

Cisco ≫ Ace 4710 Application Control Engine Version -

Cisco ≫ Ace4710 Application Control Engine Firmware Version 3.0(0)a5(3.5)

Cisco ≫ Ace 4710 Application Control Engine Version -

Cisco ≫ Ace30 Application Control Engine Module Firmware Version 3.0(0)a5(2.0)

Cisco ≫ Ace30 Application Control Engine Module Version -

Cisco ≫ Ace30 Application Control Engine Module Firmware Version 3.0(0)a5(3.0)

Cisco ≫ Ace30 Application Control Engine Module Version -

Cisco ≫ Ace30 Application Control Engine Module Firmware Version 3.0(0)a5(3.5)

Cisco ≫ Ace30 Application Control Engine Module Version -

Cisco ≫ Adaptive Security Appliance 5520 Firmware Version 9.1(7.16)

Cisco ≫ Adaptive Security Appliance 5520 Version -

Cisco ≫ Adaptive Security Appliance 5540 Firmware Version 9.1(7.16)

Cisco ≫ Adaptive Security Appliance 5540 Version -

Cisco ≫ Adaptive Security Appliance 5550 Firmware Version 9.1(7.16)

Cisco ≫ Adaptive Security Appliance 5550 Version -

Cisco ≫ Adaptive Security Appliance 5510 Firmware Version 9.1(7.16)

Cisco ≫ Adaptive Security Appliance 5510 Version -

Cisco ≫ Adaptive Security Appliance 5505 Firmware Version 9.1(7.16)

Cisco ≫ Adaptive Security Appliance 5505 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.56%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:C/I:N/A:N

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://www.kb.cert.org/vuls/id/144389

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/102170

Third Party Advisory

VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher

Third Party Advisory

http://www.securitytracker.com/id/1039984

Third Party Advisory

VDB Entry

https://www.cavium.com/security-advisory-cve-2017-17428.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-17428

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-17428

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-17428

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-17428