Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-3566

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.942
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 3.4
CVSS v2 Score 4.3
References
Products affected by CVE-2014-3566


Contact Us

Shodan ® - All rights reserved