Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. 

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero- length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the CCS Injection vulnerability.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
501801	Rockwell Automation Stratix SSL/TLS Man-in-the-Middle (CVE-2014-0224)	Tenable OT Security	Tenable.ot	11/15/2023	1/17/2024	high
500473	Siemens OpenSSL Inadequate Encryption Strength (CVE-2014-0224)	Tenable OT Security	Tenable.ot	2/7/2022	2/21/2024	high

Detections

Analytics

Plugins Search

high

high