Tracker / CVE-2017-17428
CVE-2017-17428
Medium 5.9
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
Affected products and versions
| cavium | nitrox_ssl_sdk · … → 6.1.0 |
|---|---|
| cavium | nitrox_v_ssl_sdk · … → 1.2 |
| cavium | octeon_sdk · … → 1.7.2 |
| cavium | octeon_ssl_sdk · … → 1.5.0 |
| cavium | turbossl_sdk · … → 1.0 |
| cisco | ace30_application_control_engine_module_firmware |
| cisco | ace4710_application_control_engine_firmware |
| cisco | adaptive_security_appliance_5505_firmware |
| cisco | adaptive_security_appliance_5510_firmware |
| cisco | adaptive_security_appliance_5520_firmware |
| cisco | adaptive_security_appliance_5540_firmware |
| cisco | adaptive_security_appliance_5550_firmware |
| cisco | webex_conect_im |
| cisco | webex_meetings |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.