PT-2017-14774 · Radware · Radware Alteon

Hanno Böck · Publicado 2017-12-13 · Atualizado 2019-10-03 · CVE-2017-17427

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Radware Alteon versions 31.0.0.0 through 31.0.3.0

Description The issue allows an attacker to perform an adaptive-chosen ciphertext attack, also known as a Bleichenbacher attack, on observed traffic encrypted with the RSA cipher. This enables the attacker to decrypt the traffic and perform other private key operations.

Recommendations For versions 31.0.0.0 through 31.0.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Enumeração de Fraquezas

CWE-203

Identificadores relacionados

CVE-2017-17427

Produtos afetados

Radware Alteon

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Exploit
• https://support.radware.com/app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-vulnerability · Aviso do Fabricante
• https://kb.cert.org/vuls/id/144389 · Nota
• http://securityfocus.com/bid/102199 · Nota
• https://osv.dev/vulnerability/CVE-2017-17427 · Aviso do Fabricante
• https://robotattack.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-17427 · Nota de Segurança