CVE-2017-17428

medium · 5.9

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

5.9

CVSS

14.6%

EPSS (exploit prob.)

96th

EPSS percentile

2018-03-05

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-327

Affected products

Vendor	Product	Affected versions
cavium	nitrox_ssl_sdk	<= 6.1.0
cavium	nitrox_v_ssl_sdk	<= 1.2
cavium	octeon_sdk	<= 1.7.2
cavium	octeon_ssl_sdk	<= 1.5.0
cavium	turbossl_sdk	<= 1.0
cisco	webex_conect_im	7.24.1
cisco	webex_meetings	t31
cisco	webex_meetings	t32
cisco	ace4710_application_control_engine_firmware	3.0(0)a5(2.0)
cisco	ace4710_application_control_engine_firmware	3.0(0)a5(3.0)
cisco	ace4710_application_control_engine_firmware	3.0(0)a5(3.5)
cisco	ace_4710_application_control_engine	all versions
cisco	ace30_application_control_engine_module_firmware	3.0(0)a5(2.0)
cisco	ace30_application_control_engine_module_firmware	3.0(0)a5(3.0)
cisco	ace30_application_control_engine_module_firmware	3.0(0)a5(3.5)
cisco	ace30_application_control_engine_module	all versions
cisco	adaptive_security_appliance_5520_firmware	9.1(7.16)
cisco	adaptive_security_appliance_5520	all versions
cisco	adaptive_security_appliance_5540_firmware	9.1(7.16)
cisco	adaptive_security_appliance_5540	all versions
cisco	adaptive_security_appliance_5550_firmware	9.1(7.16)
cisco	adaptive_security_appliance_5550	all versions
cisco	adaptive_security_appliance_5510_firmware	9.1(7.16)
cisco	adaptive_security_appliance_5510	all versions
cisco	adaptive_security_appliance_5505_firmware	9.1(7.16)
cisco	adaptive_security_appliance_5505	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-17428