CVSS 3.0
5.9 mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2017-17428
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
Severity
- EPSS
- 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-327
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cavium:nitrox_ssl_sdk
- cavium:nitrox_v_ssl_sdk
- cavium:octeon_sdk
- cavium:octeon_ssl_sdk
- cavium:turbossl_sdk
- cisco:ace30_application_control_engine_module_firmware
- cisco:ace4710_application_control_engine_firmware
- cisco:adaptive_security_appliance_5505_firmware
- cisco:adaptive_security_appliance_5510_firmware
- cisco:adaptive_security_appliance_5520_firmware
- cisco:adaptive_security_appliance_5540_firmware
- cisco:adaptive_security_appliance_5550_firmware
- cisco:webex_conect_im
- cisco:webex_meetings