The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the Lucky Thirteen issue.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Detections

Analytics

ABB M2M Gateway Information Disclosure in embedded OpenSSL (CVE-2013-0169)

low Tenable OT Security Plugin ID 503248

Version 1.2

Version 1.1

Version 1.2 May 29, 2025, 3:08 AM CEA reference Plugin Feed: 202505290308
Version 1.1 May 28, 2025, 9:47 AM New Plugin Feed: 202505280947