CVE-2017-17428 - CVE House
Back to Database
Status published Medium CVE-2017-17428

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development...

Vulnerability Description

Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17428

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

nitrox ssl sdk, nitrox v ssl sdk, octeon sdk, octeon ssl sdk, turbossl sdk, webex conect im, webex meetings, ace4710 application control engine firmware, ace30 application control engine module firmware, adaptive security appliance 5520 firmware, adaptive security appliance 5540 firmware, adaptive security appliance 5550 firmware, adaptive security appliance 5510 firmware, adaptive security appliance 5505 firmware
Vulnerable Versions:
0, 7.24.1, t31, t32, 3.0\(0\)a5\(2.0\), 3.0\(0\)a5\(3.0\), 3.0\(0\)a5\(3.5\), 9.1\(7.16\)

Timeline

Official Publish: March 5th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.