4.3
CVSSv2

CVE-2017-12373

Published: 15/12/2017 Updated: 09/10/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 470
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote malicious user to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions. Cisco Bug IDs: CSCvg97652.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive_security_appliance_5505_firmware -

cisco adaptive_security_appliance_5510_firmware -

cisco adaptive_security_appliance_5520_firmware -

cisco adaptive_security_appliance_5540_firmware -

cisco adaptive_security_appliance_5550_firmware -

Vendor Advisories

On December 12, 2017, a research paper with the title Return of Bleichenbacher's Oracle Threat was made publicly available This paper describes how some Transport Layer Security (TLS) stacks are vulnerable to variations of the classic Bleichenbacher attack on RSA key exchange Multiple vulnerabilities were identified based on this research An a ...