CVE-2018-12404

mediumpriority · track · 39EPSS 0.442 · 99 %ileDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
—
no known exploitation
Likely / severe?
44.2% (99th) EPSS
CVSS 4.3 · medium
Is it mine?
63 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedRUGGEDCOM ROX MX5000cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1400cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1500cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1501cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1510cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1511cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX1512cisa_csaf_ot

    Update to V2.14.0 or later version

  • FixedRUGGEDCOM ROX RX5000cisa_csaf_ot

    Update to V2.14.0 or later version

  • MitigationRUGGEDCOM ROX MX5000cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000cisa_csaf_ot

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

02

cvss

Technical severity, 0–10. One row per scoring source.

5.9
010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9
v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 3.6
v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Hsecondary · CVSS-BT (t0sche)
v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:Csecondary · CISA US
v3.15.9mediumAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-200USCWE-310US
04

affected products (63)

Products and version ranges known to be affected.

showing 20 of 63
05

advisories (3)

Vendor and ecosystem advisories describing this.

  • WID-SEC-W-2022-0517Red Hat Enterprise Linux: Mehrere SchwachstellenDeutsch2019-08-06csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2025-1212Oracle Communications Applications: Mehrere SchwachstellenDeutsch2019-04-16csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

  • ICSA-21-040-04Siemens RUGGEDCOM ROX II2021-02-09icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

06

also known as (5)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otNVDCVE.orgMITRE
published 2019-05-02modified 2026-06-17
08

references (57)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan