CVE-2017-18268 Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can es...
MediumCVSS 5.9
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom symantec intelligencecenter | = 3.3 | No fix listed |
| symantec IntelligenceCenter | = 3.3 | No fix listed |
References
- 104164 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory