Some OpenSSL software versions used in multiple Huawei products have the following OpenSSL vulnerability. Unauthorized remote attackers can dump 64 Kbytes of memory of the connected server or client in each attack. The leaked memory may contain sensitive information, such as passwords and private keys (Vulnerability ID: HWPSIRT-2014-0414).

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-0160.

CPENameOperatorVersion
ahreqV100R003C00SPC350
bcmeqV300R003C01
bcmeqV300R003C30
billing v5r5eqV500R005C21
cbseqV300R003C01
cbseqV100R002C02
cce3.0eqV100R003C00
cpseqV100R001C10
cpseqV100R001C20
crmeqV100R002C61

Name	Operator	Version
ahr	eq	V100R003C00SPC350
bcm	eq	V300R003C01
bcm	eq	V300R003C30
billing v5r5	eq	V500R005C21
cbs	eq	V300R003C01
cbs	eq	V100R002C02
cce3.0	eq	V100R003C00
cps	eq	V100R001C10
cps	eq	V100R001C20
crm	eq	V100R002C61

Rows per page:

1-10 of 3131

seebug 20

oraclelinux 1

nessus 45

qt 1

threatpost 3

securityvulns 36

ibm 11

hackerone 5

myhack58 1

redhat 2

packetstorm 8

zdt 4

openvas 12

centos 1

kitploit 3

cert 1

debiancve 1

cisco 2

vulnerlab 2

checkpoint_security 1

n0where 1

hp 3

fortinet 1

suse 1

thn 7

atlassian 2

exploitpack 2

attackerkb 1

f5 2

ubuntucve 1

ics 7

osv 1

intel 1

symantec 1

prion 1

openssl 1

debian 3

veracode 1

malwarebytes 1

freebsd 1

checkpoint_advisories 1

seebug

Barracuda多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

2014-04-16 00:00:00

McAfee Email Gateway OpenSSL TLS心跳信息泄漏漏洞

2014-04-16 00:00:00

HP多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

2014-04-16 00:00:00

oraclelinux

openssl security update

2014-04-07 00:00:00

nessus

Juniper Junos OpenSSL Heartbeat Information Disclosure (JSA10623) (Heartbleed)

2014-04-18 00:00:00

McAfee Next Generation Firewall OpenSSL Information Disclosure (SB10071) (Heartbleed)

2014-05-02 00:00:00

HP LoadRunner 11.52.x < 11.52 Patch 2 / 12.00.x < 12.00 Patch 1 Heartbeat Information Disclosure (Heartbleed)

2014-08-07 00:00:00

Heartbleed Bug (CVE-2014-0160) and Qt

2014-04-10 00:00:00

threatpost

April 2014 Oracle Critical Patch Update

2014-04-16 12:32:06

Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug

2014-04-17 11:40:41

Oracle Gives Heartbleed Update, Patches 14 Products

2014-04-21 13:55:42

securityvulns

[security bulletin] HPSBMU02994 rev.2 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Information

2014-05-01 00:00:00

[security bulletin] HPSBMU03028 rev.1 - HP Matrix Operating Environment and CloudSystem Matrix Software Components running OpenSSL, Remote Disclosure of Information

2014-05-02 00:00:00

[security bulletin] HPSBMU03012 rev.1 - HP Insight Management VCEM Web Client SDK (VCEMSDK) running OpenSSL, Remote Disclosure of Information

2014-05-01 00:00:00

ibm

Security Bulletin: Some versions of IBM Security Access Manager for Web are affected by the Heartbleed vulnerability (CVE-2014-0160)

2018-06-16 21:17:17

Security Bulletin: IBM Tealeaf Customer Experience (CX) is affected by a vulnerability in OpenSSL (CVE-2014-0160)

2018-06-16 19:36:42

Security Bulletin: IBM DS8870 Release 7.2 is affected by an additional vulnerability in OpenSSL (CVE-2014-0160)

2018-06-18 00:08:03

hackerone

Concrete CMS: https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)

2014-04-08 11:01:31

Mail.ru: OpenSSL HeartBleed (CVE-2014-0160)

2014-10-23 15:12:13

Internet Bug Bounty: TLS heartbeat read overrun

2014-04-05 23:51:06

myhack58

Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net

2014-04-10 00:00:00

redhat

(RHSA-2014:0376) Important: openssl security update

2014-04-08 00:00:00

(RHSA-2014:0396) Important: rhev-hypervisor6 security update

2014-04-10 00:00:00

packetstorm

Heartbleed User Session Extraction

2014-04-09 00:00:00

Heartbleed Proof Of Concept

2014-04-08 00:00:00

OpenSSL TLS Heartbeat Extension Memory Disclosure

2014-04-08 00:00:00

zdt

Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support

2014-04-24 00:00:00

OpenSSL Heartbeat (Heartbleed) Information Leak Exploit

2014-04-10 00:00:00

OpenSSL 1.0.1f TLS Heartbeat Extension - Memory Disclosure (Multiple SSL/TLS versions)

2014-04-09 00:00:00

openvas

Debian: Security Advisory (DSA-2896-1)

2014-04-06 00:00:00

Mageia: Security Advisory (MGASA-2014-0256)

2022-01-28 00:00:00

OpenSSL TLS 'heartbeat' Extension Information Disclosure Vulnerability (STARTTLS Check)

2014-04-09 00:00:00

centos

openssl security update

2014-04-08 02:54:58

kitploit

Heartbleed Vulnerability Scanner - Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)

2015-10-01 09:47:00

Collection of Heartbleed Tools (OpenSSL CVE-2014-0160)

2014-04-10 00:55:00

sslscan - tests SSL/TLS enabled services to discover supported cipher suites

2016-12-26 14:30:00

cert

OpenSSL TLS heartbeat extension read overflow discloses sensitive information

2014-04-08 00:00:00

debiancve

CVE-2014-0160

2014-04-07 22:55:00

cisco

OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products

2014-04-09 03:00:00

OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability

2014-04-08 14:39:29

vulnerlab

HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu

2014-04-09 00:00:00

HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu

2014-04-09 00:00:00

checkpoint_security

Check Point response to OpenSSL vulnerability (CVE-2014-0160)

2014-04-07 21:00:00

n0where

Access Point Impersonation Attacks: hostapd-wpe

2016-04-12 22:19:39

HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of Information

2014-04-23 00:00:00

HPSBPI03031 rev.3 - HP Officejet Pro X Printers, Certain Officejet Pro Printers, Remote Disclosure of Information

2014-04-30 00:00:00

HPSBPI03014 rev.2 - HP LaserJet Pro MFP Printers, HP Color LaserJet Pro MFP Printers, Remote Disclosure of Information

2014-04-22 00:00:00

fortinet

Information Disclosure Vulnerability in OpenSSL (Heartbleed)

2014-04-08 00:00:00

suse

update for openssl (important)

2014-04-08 13:04:15

thn

HeartBleed Bug Explained - 10 Most Frequently Asked Questions

2014-04-14 20:40:00

Heartbleed - OpenSSL Zero-day Bug leaves Millions of websites Vulnerable

2014-04-08 08:23:00

How to Protect yourself from the 'Heartbleed' Bug

2014-04-10 07:58:00

atlassian

Update Tomcat Native DLL in JIRA Installer

2014-06-26 19:39:26

Update Tomcat Native DLL in JIRA Installer

2014-06-26 19:39:26

exploitpack

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (2) (DTLS Support)

2014-04-24 00:00:00

OpenSSL TLS Heartbeat Extension - Heartbleed Memory Disclosure

2014-04-08 00:00:00

attackerkb

CVE-2014-0160 (AKA: Heartbleed)

2014-04-07 00:00:00

K15159 : OpenSSL vulnerability CVE-2014-0160

2015-02-16 00:00:00

SOL15159 - OpenSSL vulnerability CVE-2014-0160

2014-04-08 00:00:00

ubuntucve

CVE-2014-0160

2014-04-07 00:00:00

ics

ABB Relion 650 Series OpenSSL Vulnerability (Update A)

2018-09-06 12:00:00

Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability

2018-08-27 12:00:00

Unified Automation OPC SDK OpenSSL Vulnerability

2018-09-06 12:00:00

osv

openssl - security update

2014-04-07 00:00:00

intel

Multiple Intel Software Products and API Services impacted by CVE-2014-0160

2014-04-30 00:00:00

symantec

Symantec Messaging Gateway 10.6.x ACE Library Static Link to Vulnerable SSL Version

2016-05-12 08:00:00

prion

Buffer overflow

2014-04-07 22:55:00

openssl

Vulnerability in OpenSSL CVE-2014-0160

2014-04-07 00:00:00

debian

[SECURITY] [DSA 2896-2] openssl security update

2014-04-08 13:47:13

[SECURITY] [DSA 2896-1] openssl security update

2014-04-07 21:36:46

[SECURITY] [DSA 2896-2] openssl security update

2014-04-08 13:47:13

veracode

Information Disclosure Through Buffer Over-read

2019-01-15 09:00:11

malwarebytes

Five years later, Heartbleed vulnerability still unpatched

2019-09-12 15:00:00

freebsd

OpenSSL -- Remote Information Disclosure

2014-04-07 00:00:00

checkpoint_advisories

OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)

2014-12-28 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

Related for HUAWEI-SA-20140417-HEARTBLEED