CVE-2017-17428
05.03.2018, 18:29
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cavium | nitrox_ssl_sdk | 𝑥 ≤ 6.1.0 |
| cavium | nitrox_v_ssl_sdk | 𝑥 ≤ 1.2 |
| cavium | octeon_sdk | 𝑥 ≤ 1.7.2 |
| cavium | octeon_ssl_sdk | 𝑥 ≤ 1.5.0 |
| cavium | turbossl_sdk | 𝑥 ≤ 1.0 |
| cisco | webex_conect_im | 7.24.1 |
| cisco | ace4710_application_control_engine_firmware | 3.0\(0\)a5\(2.0\) |
| cisco | ace4710_application_control_engine_firmware | 3.0\(0\)a5\(3.0\) |
| cisco | ace4710_application_control_engine_firmware | 3.0\(0\)a5\(3.5\) |
| cisco | ace30_application_control_engine_module_firmware | 3.0\(0\)a5\(2.0\) |
| cisco | ace30_application_control_engine_module_firmware | 3.0\(0\)a5\(3.0\) |
| cisco | ace30_application_control_engine_module_firmware | 3.0\(0\)a5\(3.5\) |
| cisco | adaptive_security_appliance_5520_firmware | 9.1\(7.16\) |
| cisco | adaptive_security_appliance_5540_firmware | 9.1\(7.16\) |
| cisco | adaptive_security_appliance_5550_firmware | 9.1\(7.16\) |
| cisco | adaptive_security_appliance_5510_firmware | 9.1\(7.16\) |
| cisco | adaptive_security_appliance_5505_firmware | 9.1\(7.16\) |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References