CVE-2024-0202
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-0202 is a security vulnerability in the cryptlib cryptographic library. When cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS, it becomes vulnerable to the timing variant of the Bleichenbacher attack. This vulnerability allows an attacker who can perform a large number of connections to the server to decrypt RSA ciphertexts or forge signatures using the server's certificate. The affected product is W3xsMp. To remediate this vulnerability, it is recommended to update or patch the cryptlib library to a version that addresses this issue. If left unaddressed, this vulnerability poses a high risk to organizations as it could lead to unauthorized access and compromise of sensitive information protected by RSA encryption.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions