CVE-2014-0627
published 2014-02-18CVE-2014-0627: The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher…
PriorityP428medium5CVSS 2.0
AVNACLAuNCNIPAN
EPSS
1.53%
74.3th percentile
The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a certain incomplete-handshake state.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | bsafe_ssl-j | — | — |
| dell | bsafe_ssl-j | — | — |
| emc | rsa_bsafe_ssl-j | — | — |
| emc | rsa_bsafe_ssl-j | — | — |
| emc | rsa_bsafe_ssl-j | — | — |
| emc | rsa_bsafe_ssl-j | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-02-18
Published