Lucene search
+L

71 matches found

Tenable Nessus
Tenable Nessus
•added 2023/04/03 12:00 a.m.•50 views

Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack (cisco-sa-ftd-tls-bb-rCgtmY2)

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

5.3CVSS5.7AI score0.00714EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/15 9:15 p.m.•41 views

CVE-2022-20940

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

5.3CVSS0.00714EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/15 9:15 p.m.•24 views

Information disclosure

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

5CVSS5.5AI score0.00714EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/11/10 5:38 p.m.•60 views

CVE-2022-20940

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

5.3CVSS5.8AI score0.00714EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/10 5:38 p.m.•108 views

CVE-2022-20940

Cisco Firepower Threat Defense (FTD) Software is affected by a Bleichenbacher-related information disclosure in the TLS handler and SSL decryption policy implementation. The root cause is improper countermeasures against Bleichenbacher attacks, allowing an unauthenticated remote attacker to poten...

5.3CVSS5.5AI score0.00714EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2022/11/09 4:00 p.m.•94 views

Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

5.3CVSS5.5AI score0.00714EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•15 views

PT-2022-6709 · Cisco · Cisco Nexus 9000 Series Fabric Switches +3

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Fabric Switches in ACI mode affected versions not specified Cisco Nexus series 9332C, 9364C, and 9500 affected versions not specified Description: The issue is related to an incorrect implementation of the ciphers used...

7.4CVSS7.1AI score0.00343EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2022/05/03 3:16 a.m.•45 views

CVE-2022-20742 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability

A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerability is due to an improper implementatio...

7.4CVSS7.5AI score0.0046EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/05/13 12:00 a.m.•38 views

Cisco Firepower Threat Defense 1000 Series Bleichenbacher Attack (cisco-sa-asaftd-tls-bb-2g9uWkP)

According to its self-reported version, the TLS handler of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls is affected by the Bleichenbacher attack vulnerability due to improper implementation of countermeasures against the Bleichenbacher attack for cipher...

5.3CVSS6.3AI score0.01266EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/05/13 12:00 a.m.•48 views

Cisco Adaptive Security Appliance Software Bleichenbacher Attack (cisco-sa-asaftd-tls-bb-2g9uWkP)

According to its self-reported version, the TLS handler of Cisco Adaptive Security Appliance ASA Software for Cisco Firepower 1000 is affected by the Bleichenbacher attack vulnerability due to improper implementation of countermeasures against the Bleichenbacher attack for cipher suites that rely...

5.3CVSS6.3AI score0.01266EPSS
SaveExploits0References3
Prion
Prion
•added 2020/10/21 7:15 p.m.•31 views

Input validation

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

4.3CVSS4.5AI score0.01266EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/10/21 6:37 p.m.•50 views

CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS4.5AI score0.01266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/10/21 6:37 p.m.•18 views

CVE-2020-3585 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS7AI score0.01266EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•56 views

Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability

A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...

5.3CVSS4.9AI score0.01266EPSS
SaveExploits0References1
NVD
NVD
•added 2020/07/01 2:15 p.m.•38 views

CVE-2017-1712

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iteratively query a server running a vulnerable TLS stack...

5.9CVSS0.00674EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/01 2:15 p.m.•37 views

Design/Logic Flaw

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iteratively query a server running a vulnerable TLS stack...

4.3CVSS5.5AI score0.00674EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/07/01 1:47 p.m.•34 views

CVE-2017-1712

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iteratively query a server running a vulnerable TLS stack...

5.6AI score0.00674EPSS
SaveExploits0References1
CVE
CVE
•added 2020/07/01 1:47 p.m.•92 views

CVE-2017-1712

CVE-2017-1712 is a vulnerability in the TLS protocol implementation of the Domino server where an unauthenticated, remote attacker can exploit a Bleichenbacher-like oracle (ROBOT) to decrypt previously captured TLS sessions. The issue arises from cryptanalytic operations enabled by iterative quer...

5.9CVSS5.5AI score0.00674EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2017/12/15 8:29 p.m.•35 views

Stack overflow

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series ASA 5505, 5510, 5520, 5540, and 5550 devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iterative...

4.3CVSS6.1AI score0.12798EPSS
SaveExploits0References2
NVD
NVD
•added 2017/12/15 8:29 p.m.•49 views

CVE-2017-12373

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series ASA 5505, 5510, 5520, 5540, and 5550 devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat ROBOT attack. An attacker could iterative...

5.9CVSS6.4AI score0.12798EPSS
SaveExploits0References2
Rows per page
Query Builder