PT-2017-14774 · Radware · Radware Alteon

Hanno Böck · Published 2017-12-13 · Updated 2019-10-03 · CVE-2017-17427

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Radware Alteon versions 31.0.0.0 through 31.0.3.0

Description The issue allows an attacker to perform an adaptive-chosen ciphertext attack, also known as a Bleichenbacher attack, on observed traffic encrypted with the RSA cipher. This enables the attacker to decrypt the traffic and perform other private key operations.

Recommendations For versions 31.0.0.0 through 31.0.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2017-17427

Affected Products

Radware Alteon

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py · Exploit
• https://support.radware.com/app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-17427 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17427 · Security Note
• https://kb.cert.org/vuls/id/144389 · Note
• http://securityfocus.com/bid/102199 · Note
• https://robotattack.org · Note