wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA     key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application.
    This vulnerability is referred to as ROBOT. (CVE-2017-13099)

Note that Nessus relies on the presence of the package as reported by the vendor.

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as ROBOT.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote host is affected by an information disclosure vulnerability. The SSL/TLS service supports RSA key exchanges, and incorrectly leaks whether or not the RSA key exchange sent by a client was correctly formatted. This information can allow an attacker to decrypt previous SSL/TLS sessions or impersonate the server.

Note that this plugin does not attempt to recover an RSA ciphertext, however it sends a number of correct and malformed RSA ciphertexts as part of an SSL handshake and observes how the server responds.

This plugin attempts to discover the vulnerability in multiple ways, by not completing the handshake and by completing it incorrectly, as well as using a variety of cipher suites. Only the first method that finds the service to be vulnerable is reported.

This plugin requires report paranoia as some services will report as affected even though the issue is not exploitable.

ID	Name	Product	Family	Severity
259255	Linux Distros Unpatched Vulnerability : CVE-2017-13099	Nessus	Misc.	medium
501025	Siemens SCALANCE W1750D Cryptographic Issues (CVE-2017-13099)	Tenable OT Security	Tenable.ot	medium
105415	Return Of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure	Nessus	General	high

Detections

Analytics

CVE-2017-13099

medium

Tenable Plugins

medium

medium

high