Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenb…

Published 8 y ago 2017-12-13 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.9

v3.0 · NVD

CISA KEV

not known exploited

EPSS

15.6%

percentile 97%

Public exploits

Metasploit

Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenbacher attack"). This allows an attacker to decrypt observed traffic that has been encrypted with the RSA cipher and to perform other private key operations.

Exploit prediction (EPSS)

15.58% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

Metasploit auxiliary/scanner/ssl/bleichenbacher_oracle Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5 · metasploit auxiliary, normal rank · 2009-06-17

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	5.9	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	4.3	`AV:N/AC:M/Au:N/C:P/I:N/A:N`

Classification

Weakness

CWE-203 Observable Discrepancy

References

robotattack.org / · x_refsource_MISC, x_transferred
securityfocus.com /bid/102199 · vdb-entry, x_refsource_BID, x_transferred
kb.cert.org /vuls/id/144389 · third-party-advisory, x_refsource_CERT-VN, x_transferred
support.radware.com /app/answers/answer_view/a_id/1010361/~/cve-2017-17427-adaptive-chosen-ciphertext-attack-v · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-17427
NVD: CVE-2017-17427

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.