CVE-2018-5762
Medium
Description
The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 (IC #17), and 60.0 before 60.044 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
SeverityMedium
CVSS5.9
Exploit probability—
ProductUnisys Clearpath Mcp
PublishedFeb 26, 2018
First seenFeb 26, 2018
How to fix
Update
- unisys clearpath_mcp58.160, 059.1a.17, 60.044 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unisys clearpath_mcp | 58.1 ≤ v < 58.160, 59.1 ≤ v < 059.1a.17, 60.0 ≤ v < 60.044 | 58.160, 059.1a.17, 60.044 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.