What is the CVSS score of CVE-2015-2987?

CVE-2015-2987 has a CVSS 2.0 base score of 2.6 (Low). CVSS vector: AV:N/AC:H/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2015-2987?

Yes, a patch is available for CVE-2015-2987. Update the affected software to the latest version immediately.

Ed CVE-2015-2987

LOW

DEPRECATED: Code (CWE-17)

2015-08-28 vultures@jpcert.or.jp

Information Disclosure Ed

2.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.6 LOW

AV:N/AC:H/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Aug 28, 2015 - 15:59 cve.org

LOW 2.6

DescriptionCVE.org

Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-17. Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits. Affected products include: Type74 Ed. Version information: before 4.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.