CVE-2016-2183
mediumpriority · attend · 73OT risk · highEPSS 0.947 · 100 %ileexploit · PoCDEEURUUSEPSS · scored 2026-10-22
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedFirmware <V3.3.32 installed on IE-SW-PL10M-3GT-7TXweidmueller_psirt
Update to version V3.3.32
- FixedFirmware <V3.3.32 installed on IE-SW-PL10MT-3GT-7TXweidmueller_psirt
Update to version V3.3.32
- FixedFirmware <V3.4.30 installed on IE-SW-PL16M-16TXweidmueller_psirt
Update to version V3.4.30
- FixedFirmware <V3.4.30 installed on IE-SW-PL16MT-16TXweidmueller_psirt
Update to version V3.4.30
- FixedFirmware <V3.4.38 installed on IE-SW-PL18M-2GC-16TXweidmueller_psirt
Update to version V3.4.38
- FixedFirmware <V3.4.38 installed on IE-SW-PL18MT-2GC-16TXweidmueller_psirt
Update to version V3.4.38
- FixedFirmware <V3.5.34 installed on IE-SW-VL08MT-5TX-1SC-2SCSweidmueller_psirt
Update to version V3.5.34
- FixedFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2SCweidmueller_psirt
Update to version V3.5.34
- FixedFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2SCSweidmueller_psirt
Update to version V3.5.34
- FixedFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2STweidmueller_psirt
Update to version V3.5.34
- FixedFirmware <V3.5.34 installed on IE-SW-VL08MT-8TXweidmueller_psirt
Update to version V3.5.34
- FixedFirmware <V3.6.30 installed on IE-SW-VL05M-5TXweidmueller_psirt
Update to version V3.6.30
- FixedFirmware <V3.6.30 installed on IE-SW-VL05MT-5TXweidmueller_psirt
Update to version V3.6.30
- FixedTelepresence Box 7.0.0<8.0.0 older than 08.08.2025trumpf_psirt
Since August 8st, 2025, an automated configuration update is available for TRUMPF machines with a Telepresence Box 7.0.0 and newer. It will automatically be applied when activating a remote session from the machine. It is not necessary for a TRUMPF technician to join the session.
- Fixedhelmholz_psirt
Update to latest firmware 1.12.100
- Fixedhelmholz_psirt
Update to latest firmware 1.10.232
- FixedUR B30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR B90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR C30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR C60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR C70cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR C95cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR D30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR D60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR F35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR F60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR G30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR G60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR L30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR L60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR L90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR M60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR N60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR T35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedUR T60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - FixedAE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAE-200Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAE-200Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAE-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAE-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAG-150A-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedAG-150A-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedEB-50GU-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedEB-50GU-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedEW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedEW-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedEW-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedG-150ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedGB-50ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedGB-50ADA-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedGB-50ADA-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedTE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedTE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedTW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- FixedSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - FixedSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationUR B30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR B90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C70cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C95cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR D30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR D60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR F35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR F60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR G30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR G60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR M60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR N60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR T35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR T60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationAE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-200Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-200Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAG-150A-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAG-150A-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEB-50GU-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEB-50GU-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationG-150ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADA-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADA-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationIntelliSpace Portal 7.0.xcisa_csaf_ot
Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.
- MitigationIntelliSpace Portal 8.0.xcisa_csaf_ot
Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.
- No fix plannedTelepresence Box <7.0.0trumpf_psirt
Machines using a Telepresence Box 6.x and older can't use secure encryption. All customers still connecting to TRUMPF with such a device will be identified by TRUMPF and contacted with further information. It is possible to order a new Telepresence Box via your sales representative. In such a case, please contact the TRUMPF Service for installation.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
affected products (265)
Products and version ranges known to be affected.
- Cisco AnyConnect Secure Mobility Solutionall versionscert_bundDEcpe:/a:cisco:anyconnect_secure_mobility_client:2.0
- Cisco Application Networking Managerall versionscert_bundDEcpe:/a:cisco:application_networking_manager:-
- Cisco Intrusion Prevention System (IPS)all versionscert_bundDEcpe:/h:cisco:intrusion_prevention_system:-
advisories (15)
Vendor and ecosystem advisories describing this.
- SSA-412672SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.72022-12-13csaf · siemens_psirtDE
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions.
- VDE-2025-023Weidmueller: OpenSSL vulnerability in industrial ethernet switches2025-03-05csaf · weidmueller_psirtDE
Multiple Weidmueller products are affected by an OpenSSL vulnerability. Weidmüller has released new firmwares of the affected products to fix the vulnerability.
- VDE-2025-078TRUMPF: Remote support uses an outdated encryption algorithm2025-08-25csaf · trumpf_psirtDE
The TRUMPF remote support infrastructure selects an outdated encryption algorithm when setting up communication channels for machines. This cannot be prevented for old machines. For most machines it is possible to change the encryption settings.
- VDE-2026-013Helmholz: Use of a Broken or Risky Cryptographic Algorithm2026-04-07csaf · helmholz_psirtDE
Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.
- VDE-2026-015Helmholz: Use of a Broken or Risky Cryptographic Algorithm2026-04-21csaf · helmholz_psirtDE
Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.
- WID-SEC-W-2022-1955OpenSSL: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2016-08-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- WID-SEC-W-2024-0064Juniper Produkte: Mehrere SchwachstellenDeutsch2024-01-10csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.
- WID-SEC-W-2024-0209OpenSSL: Mehrere SchwachstellenDeutsch2016-09-22csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
- WID-SEC-W-2024-1277Oracle Fusion Middleware: Mehrere SchwachstellenDeutsch2017-04-18csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
- WID-SEC-W-2026-0180Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.
- ICSA-21-075-02GE UR Family (Update A)2021-03-16icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.
- ICSA-22-160-01Mitsubishi Electric Air Conditioning Systems2022-06-09icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.
- ICSA-22-349-21Siemens SCALANCE X-200RNA Switch Devices2022-12-13icsa · cisa_csaf_otUS
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSMA-18-058-02Philips Intellispace Portal ISP Vulnerabilities2018-02-27icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, perform man-in-the-middle attacks, create denial of service conditions, or execute arbitrary code.
- PSF-2016-4Sweet32 attack (DES, 3DES)2016-09-01vendor · osvUS
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (450)
External citations — patches, advisories, analysis.
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759cnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.htmlcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan