CVE-2020-1968
mediumPriorität · verfolgen · 17EPSS 0.049 · 92. PerzentilDEEURUUSEPSS · bewertet 2026-10-22
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRTU500 series CMU Firmwarecisa_csaf_ot
RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.
- BehobenFCPcisa_csaf_ot
For FCP 1.1.0 - 1.3.0, FCP 2.1.0 - 2.3.0, FCP 3.0.0 - 3.12.0: Users should apply mitigations listed in this advisory and in the mitigation section of Hitachi Energy advisory 8DBD000104.
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000104 - BehobenGWScisa_csaf_ot
GWS 2.0.0.0 and earlier, GWS 2.1.0.0, GWS 2.2.0.0, GWS 2.3.0.0, GWS 2.4.0.0,GWS 3.0.0.0, GWS 3.1.0.0: Apply the mitigation factors as described in this advisory and in the mitigation section of Hitachi Energy advisory 8DBD000101.
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000101 - MitigationRTU500 series CMU Firmwarecisa_csaf_ot
Do not directly connect to the Internet.
- Mitigation SYS600cisa_csaf_ot
Hitachi Energy recommends security practices and firewall configurations to help protect process control networks from attacks that originate from outside the network. Such practices include physically protecting process control systems from direct access by unauthorized personnel, having no direct connections to the Internet, separating from other networks by means of a firewall system that has a minimal number of ports exposed, and others that must be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
- MitigationAll System Data Manager - SDM600cisa_csaf_ot
Carefully scan portable computers and removable storage media for viruses before connecting to a control system.
- MitigationFCPcisa_csaf_ot
Physically protect process control systems from unauthorized direct access.
- MitigationGWScisa_csaf_ot
Physically protect process control systems from unauthorized direct access.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 3.4–8.1
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (68)
Betroffene Produkte und Versionsbereiche.
- Hitachi Energy All System Data Manager - SDM600< 1.2 FP2 HF10 (Build Nr. 1.2.14002.506)cisa_csaf_otUS
Advisories (7)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2022-1723TLS: Mehrere Schwachstellen ermöglichen Umgehen von SicherheitsvorkehrungenDeutsch2020-09-09csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TLS 1.2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- WID-SEC-W-2026-0180Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.
- ICSA-21-336-08Hitachi Energy RTU500 series2021-12-02icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.
- ICSA-22-111-03Hitachi Energy MicroSCADA Pro/X SYS6002022-04-21icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic between network source and destination, gain unauthorized access to information, or cause a denial-of-service condition.
- ICSA-22-116-01Hitachi Energy System Data Manager2022-04-26icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic or to cause a denial-of-service condition.
- ICSA-22-242-01Hitachi Energy FACTS Control Platform (FCP) Product2022-08-30icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow an attacker to eavesdrop on the traffic between network source and destination, gain unauthorized access to information or cause a denial-of service.
- ICSA-22-242-02Hitachi Energy Gateway Station (GWS) Product2022-08-30icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow unauthorized users to eavesdrop on the traffic between network source and destination, gain unauthorized access to information, or cause a denial-of service condition.
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (65)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2020-1968cnnvd
- https://lists.debian.org/debian-lts-announce/2020/09/msg00016.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-1968cnnvd
- https://packetstormsecurity.com/files/159195/Ubuntu-Security-Notice-USN-4504-1.htmlcnnvd
- https://packetstormsecurity.com/files/168714/Gentoo-Linux-Security-Advisory-202210-02.htmlcnnvd
- https://security.gentoo.org/glsa/202210-02cnnvd
- https://security.netapp.com/advisory/ntap-20200911-0004/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-336-08cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan