S7 1500 Firmware
1 CVEs
product
Monthly
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.7%.
Information Disclosure
OpenSSL
Jboss Enterprise Application Platform
Jboss Enterprise Web Platform
Jboss Enterprise Web Server
+12
NVD
CVSS 3.1
7.4
EPSS
89.7%
Threat
5.7
EPSS 90%
5.7
CVSS 7.4
HIGH
POC
PATCH
THREAT
Act Now
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.7%.
Information Disclosure
OpenSSL
Jboss Enterprise Application Platform
+14
NVD