Cisco Adaptive Security Appliance 5520 Firmware vulnerabilities

2 CVEs affecting Cisco Adaptive Security Appliance 5520 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17428, published 2018-03-05.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-17428, published 2018-03-05. Medium severity, CVSS 5.9. EPSS: 14.6% chance of exploitation in the next 30 days. Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT…
• CVE-2017-12373, published 2017-12-15. Medium severity, CVSS 5.9. EPSS: 12.8% chance of exploitation in the next 30 days. A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive…