CVE-2016-10212 Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-027...
MediumCVSS 5.9
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radware alteon | <= 30.0.5.10 | No fix listed |
| radware alteon | <= 30.2.1.1 | No fix listed |
References
- 96172 third-party-advisory vdb-entry
- github.com third-party-advisory
- support.radware.com vendor-advisory