CVE-2020-1968
mediumpriority · track · 17EPSS 0.049 · 92 %ileDEEURUUSEPSS · scored 2026-10-22
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRTU500 series CMU Firmwarecisa_csaf_ot
RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.
- FixedFCPcisa_csaf_ot
For FCP 1.1.0 - 1.3.0, FCP 2.1.0 - 2.3.0, FCP 3.0.0 - 3.12.0: Users should apply mitigations listed in this advisory and in the mitigation section of Hitachi Energy advisory 8DBD000104.
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000104 - FixedGWScisa_csaf_ot
GWS 2.0.0.0 and earlier, GWS 2.1.0.0, GWS 2.2.0.0, GWS 2.3.0.0, GWS 2.4.0.0,GWS 3.0.0.0, GWS 3.1.0.0: Apply the mitigation factors as described in this advisory and in the mitigation section of Hitachi Energy advisory 8DBD000101.
https://search.abb.com/library/Download.aspx?DocumentID=8DBD000101 - MitigationRTU500 series CMU Firmwarecisa_csaf_ot
Do not directly connect to the Internet.
- Mitigation SYS600cisa_csaf_ot
Hitachi Energy recommends security practices and firewall configurations to help protect process control networks from attacks that originate from outside the network. Such practices include physically protecting process control systems from direct access by unauthorized personnel, having no direct connections to the Internet, separating from other networks by means of a firewall system that has a minimal number of ports exposed, and others that must be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
- MitigationAll System Data Manager - SDM600cisa_csaf_ot
Carefully scan portable computers and removable storage media for viruses before connecting to a control system.
- MitigationFCPcisa_csaf_ot
Physically protect process control systems from unauthorized direct access.
- MitigationGWScisa_csaf_ot
Physically protect process control systems from unauthorized direct access.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 3.4–8.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (68)
Products and version ranges known to be affected.
- Hitachi Energy All System Data Manager - SDM600< 1.2 FP2 HF10 (Build Nr. 1.2.14002.506)cisa_csaf_otUS
advisories (7)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2022-1723TLS: Mehrere Schwachstellen ermöglichen Umgehen von SicherheitsvorkehrungenDeutsch2020-09-09csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TLS 1.2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- WID-SEC-W-2026-0180Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.
- ICSA-21-336-08Hitachi Energy RTU500 series2021-12-02icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.
- ICSA-22-111-03Hitachi Energy MicroSCADA Pro/X SYS6002022-04-21icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic between network source and destination, gain unauthorized access to information, or cause a denial-of-service condition.
- ICSA-22-116-01Hitachi Energy System Data Manager2022-04-26icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic or to cause a denial-of-service condition.
- ICSA-22-242-01Hitachi Energy FACTS Control Platform (FCP) Product2022-08-30icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow an attacker to eavesdrop on the traffic between network source and destination, gain unauthorized access to information or cause a denial-of service.
- ICSA-22-242-02Hitachi Energy Gateway Station (GWS) Product2022-08-30icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow unauthorized users to eavesdrop on the traffic between network source and destination, gain unauthorized access to information, or cause a denial-of service condition.
also known as (6)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (65)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2020-1968cnnvd
- https://lists.debian.org/debian-lts-announce/2020/09/msg00016.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-1968cnnvd
- https://packetstormsecurity.com/files/159195/Ubuntu-Security-Notice-USN-4504-1.htmlcnnvd
- https://packetstormsecurity.com/files/168714/Gentoo-Linux-Security-Advisory-202210-02.htmlcnnvd
- https://security.gentoo.org/glsa/202210-02cnnvd
- https://security.netapp.com/advisory/ntap-20200911-0004/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-336-08cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan