auxiliary/scanner/ssl/openssl_ccs

functional

OpenSSL Server-Side ChangeCipherSpec Injection Scanner

view exploit source metasploittype auxiliarypublished 2014-06-05catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-0224US	high7.4	95.3% (100th)	Exploit	2014-06-05
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.