.png?width=180&height=32&name=NW%20Logo%20(2).png){kind=small}
CERT/CC Vulnerability Note VU#144389: Potential Impact on RSA Products
Advisory Type
Unknown
Advisory Content
Article Number
000035836
CVE ID
000035836
Article Summary
CERT/CC Vulnerability Note VU#144389: Potential Impact on RSA Products
Resolution
RSA is aware of the work of security researchers Hanno Böck, Juraj Somorovsky, and Craig Young to demonstrate variations of the 1998 Bleichenbacher attack on certain Transport Layer Security (TLS) implementation stacks (also known as a "ROBOT attack"). RSA BSAFE® TLS implementation is not vulnerable to the attack demonstrated by the work of these researchers.
RSA is investigating to identify RSA products that may use any of the impacted TLS implementation stacks. We will update this article with information as it becomes available, with impacted RSA products, if any, and remediation steps, if applicable.
Please note: The RSA keys referred to by CERT/CC VU#144389 have no relation to RSA the security company or the RSA SecurID® algorithm.
RSA is investigating to identify RSA products that may use any of the impacted TLS implementation stacks. We will update this article with information as it becomes available, with impacted RSA products, if any, and remediation steps, if applicable.
Please note: The RSA keys referred to by CERT/CC VU#144389 have no relation to RSA the security company or the RSA SecurID® algorithm.
Notes
References:
- CERT/CC Vulnerability Note: http://www.kb.cert.org/vuls/id/144389
- Researcher's website: https://robotattack.org/