CVE-2015-2808

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

El algoritmo RC4, utilizado en el protocolo TLS y el protocolo SSL, no combina correctamente los datos de estados con los datos de claves durante la fase de inicialización, lo que facilita a atacantes remotos realizar ataques de recuperación de texto claro contra los bytes iniciales de un flujo mediante la captura de trafico de la red que ocasionalmente depende de claves afectadas por la debilidad de la invariabilidad (Invariance Weakness), y posteriormente utilizar un acercamiento de fuerza bruta que involucra valores LSB, también conocido como el problema de 'Bar Mitzvah'.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-03-31 CVE Reserved
2015-04-01 CVE Published
2024-08-06 CVE Updated
2024-11-11 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

CAPEC

References (103)

URL	Tag	Source
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21883640	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21903565	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960015	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960769	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-454055	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Third Party Advisory
http://www.securityfocus.com/bid/73684	Third Party Advisory
http://www.securityfocus.com/bid/91787	Third Party Advisory
http://www.securitytracker.com/id/1032599	Third Party Advisory
http://www.securitytracker.com/id/1032600	Third Party Advisory
http://www.securitytracker.com/id/1032707	Third Party Advisory
http://www.securitytracker.com/id/1032708	Third Party Advisory
http://www.securitytracker.com/id/1032734	Third Party Advisory
http://www.securitytracker.com/id/1032788	Third Party Advisory
http://www.securitytracker.com/id/1032858	Third Party Advisory
http://www.securitytracker.com/id/1032868	Third Party Advisory
http://www.securitytracker.com/id/1032910	Third Party Advisory
http://www.securitytracker.com/id/1032990	Third Party Advisory
http://www.securitytracker.com/id/1033071	Third Party Advisory
http://www.securitytracker.com/id/1033072	Third Party Advisory
http://www.securitytracker.com/id/1033386	Third Party Advisory
http://www.securitytracker.com/id/1033415	Third Party Advisory
http://www.securitytracker.com/id/1033431	Third Party Advisory
http://www.securitytracker.com/id/1033432	Third Party Advisory
http://www.securitytracker.com/id/1033737	Third Party Advisory
http://www.securitytracker.com/id/1033769	Third Party Advisory
http://www.securitytracker.com/id/1036222	Third Party Advisory
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888	Third Party Advisory
https://kb.juniper.net/JSA10783	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10163	Broken Link
https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709	Third Party Advisory
https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf	Technical Description
https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2

URL	Date	SRC

URL	Date	SRC
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	2023-09-07

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html	2023-09-07
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html	2023-09-07
http://marc.info/?l=bugtraq&m=143456209711959&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=143629696317098&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=143741441012338&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=143817021313142&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=143817899717054&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=143818140118771&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144043644216842&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144059660127919&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144059703728085&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144060576831314&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144060606031437&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144069189622016&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144102017024820&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144104533800819&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144104565600964&w=2	2023-09-07
http://marc.info/?l=bugtraq&m=144493176821532&w=2	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1006.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1007.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1020.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1021.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1091.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1228.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1229.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1230.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1241.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1242.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1243.html	2023-09-07
http://rhn.redhat.com/errata/RHSA-2015-1526.html	2023-09-07
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888	2023-09-07
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892	2023-09-07
http://www.debian.org/security/2015/dsa-3316	2023-09-07
http://www.debian.org/security/2015/dsa-3339	2023-09-07
http://www.ubuntu.com/usn/USN-2696-1	2023-09-07
http://www.ubuntu.com/usn/USN-2706-1	2023-09-07
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922	2023-09-07
https://security.gentoo.org/glsa/201512-10	2023-09-07
https://access.redhat.com/security/cve/CVE-2015-2808	2015-07-30
https://bugzilla.redhat.com/show_bug.cgi?id=1207101	2015-07-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Suse Search vendor "Suse"	Manager Search vendor "Suse" for product "Manager"	1.7 Search vendor "Suse" for product "Manager" and version "1.7"	-	Affected	in	Suse Search vendor "Suse"	Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"	11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"	sp2	Safe
Redhat Search vendor "Redhat"	Satellite Search vendor "Redhat" for product "Satellite"	5.6 Search vendor "Redhat" for product "Satellite" and version "5.6"	-	Affected	in	Redhat Search vendor "Redhat"	Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"	5.0 Search vendor "Redhat" for product "Enterprise Linux" and version "5.0"	-	Safe
Redhat Search vendor "Redhat"	Satellite Search vendor "Redhat" for product "Satellite"	5.6 Search vendor "Redhat" for product "Satellite" and version "5.6"	-	Affected	in	Redhat Search vendor "Redhat"	Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"	6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0"	-	Safe
Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M3000 Firmware Search vendor "Fujitsu" for product "Sparc Enterprise M3000 Firmware"	>= xcp < xcp_1121 Search vendor "Fujitsu" for product "Sparc Enterprise M3000 Firmware" and version " >= xcp < xcp_1121"	-	Affected	in	Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M3000 Search vendor "Fujitsu" for product "Sparc Enterprise M3000"	-	-	Safe
Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M4000 Firmware Search vendor "Fujitsu" for product "Sparc Enterprise M4000 Firmware"	>= xcp < xcp_1121 Search vendor "Fujitsu" for product "Sparc Enterprise M4000 Firmware" and version " >= xcp < xcp_1121"	-	Affected	in	Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M4000 Search vendor "Fujitsu" for product "Sparc Enterprise M4000"	-	-	Safe
Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M5000 Firmware Search vendor "Fujitsu" for product "Sparc Enterprise M5000 Firmware"	>= xcp < xcp_1121 Search vendor "Fujitsu" for product "Sparc Enterprise M5000 Firmware" and version " >= xcp < xcp_1121"	-	Affected	in	Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M5000 Search vendor "Fujitsu" for product "Sparc Enterprise M5000"	-	-	Safe
Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M8000 Firmware Search vendor "Fujitsu" for product "Sparc Enterprise M8000 Firmware"	>= xcp < xcp_1121 Search vendor "Fujitsu" for product "Sparc Enterprise M8000 Firmware" and version " >= xcp < xcp_1121"	-	Affected	in	Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M8000 Search vendor "Fujitsu" for product "Sparc Enterprise M8000"	-	-	Safe
Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M9000 Firmware Search vendor "Fujitsu" for product "Sparc Enterprise M9000 Firmware"	>= xcp < xcp_1121 Search vendor "Fujitsu" for product "Sparc Enterprise M9000 Firmware" and version " >= xcp < xcp_1121"	-	Affected	in	Fujitsu Search vendor "Fujitsu"	Sparc Enterprise M9000 Search vendor "Fujitsu" for product "Sparc Enterprise M9000"	-	-	Safe
Huawei Search vendor "Huawei"	E6000 Firmware Search vendor "Huawei" for product "E6000 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	E6000 Search vendor "Huawei" for product "E6000"	-	-	Safe
Huawei Search vendor "Huawei"	E9000 Firmware Search vendor "Huawei" for product "E9000 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	E9000 Search vendor "Huawei" for product "E9000"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor 18500 Firmware Search vendor "Huawei" for product "Oceanstor 18500 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor 18500 Search vendor "Huawei" for product "Oceanstor 18500"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor 18800 Firmware Search vendor "Huawei" for product "Oceanstor 18800 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor 18800 Search vendor "Huawei" for product "Oceanstor 18800"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor 18800f Firmware Search vendor "Huawei" for product "Oceanstor 18800f Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor 18800f Search vendor "Huawei" for product "Oceanstor 18800f"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor 9000 Firmware Search vendor "Huawei" for product "Oceanstor 9000 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor 9000 Search vendor "Huawei" for product "Oceanstor 9000"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor Cse Firmware Search vendor "Huawei" for product "Oceanstor Cse Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor Cse Search vendor "Huawei" for product "Oceanstor Cse"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor Hvs85t Firmware Search vendor "Huawei" for product "Oceanstor Hvs85t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor Hvs85t Search vendor "Huawei" for product "Oceanstor Hvs85t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor S2600t Firmware Search vendor "Huawei" for product "Oceanstor S2600t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor S2600t Search vendor "Huawei" for product "Oceanstor S2600t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor S5500t Firmware Search vendor "Huawei" for product "Oceanstor S5500t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor S5500t Search vendor "Huawei" for product "Oceanstor S5500t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor S5600t Firmware Search vendor "Huawei" for product "Oceanstor S5600t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor S5600t Search vendor "Huawei" for product "Oceanstor S5600t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor S5800t Firmware Search vendor "Huawei" for product "Oceanstor S5800t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor S5800t Search vendor "Huawei" for product "Oceanstor S5800t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor S6800t Firmware Search vendor "Huawei" for product "Oceanstor S6800t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor S6800t Search vendor "Huawei" for product "Oceanstor S6800t"	-	-	Safe
Huawei Search vendor "Huawei"	Oceanstor Vis6600t Firmware Search vendor "Huawei" for product "Oceanstor Vis6600t Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Oceanstor Vis6600t Search vendor "Huawei" for product "Oceanstor Vis6600t"	-	-	Safe
Huawei Search vendor "Huawei"	Quidway S9300 Firmware Search vendor "Huawei" for product "Quidway S9300 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Quidway S9300 Search vendor "Huawei" for product "Quidway S9300"	-	-	Safe
Huawei Search vendor "Huawei"	S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S7700 Search vendor "Huawei" for product "S7700"	-	-	Safe
Huawei Search vendor "Huawei"	S7700 Firmware Search vendor "Huawei" for product "S7700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S7700 Search vendor "Huawei" for product "S7700"	-	-	Safe
Huawei Search vendor "Huawei"	9700 Firmware Search vendor "Huawei" for product "9700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	9700 Search vendor "Huawei" for product "9700"	-	-	Safe
Huawei Search vendor "Huawei"	9700 Firmware Search vendor "Huawei" for product "9700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	9700 Search vendor "Huawei" for product "9700"	-	-	Safe
Huawei Search vendor "Huawei"	S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S12700 Search vendor "Huawei" for product "S12700"	-	-	Safe
Huawei Search vendor "Huawei"	S12700 Firmware Search vendor "Huawei" for product "S12700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S12700 Search vendor "Huawei" for product "S12700"	-	-	Safe
Huawei Search vendor "Huawei"	S2700 Firmware Search vendor "Huawei" for product "S2700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S2700 Search vendor "Huawei" for product "S2700"	-	-	Safe
Huawei Search vendor "Huawei"	S3700 Firmware Search vendor "Huawei" for product "S3700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S3700 Search vendor "Huawei" for product "S3700"	-	-	Safe
Huawei Search vendor "Huawei"	S5700ei Firmware Search vendor "Huawei" for product "S5700ei Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700ei Search vendor "Huawei" for product "S5700ei"	-	-	Safe
Huawei Search vendor "Huawei"	S5700hi Firmware Search vendor "Huawei" for product "S5700hi Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700hi Search vendor "Huawei" for product "S5700hi"	-	-	Safe
Huawei Search vendor "Huawei"	S5700si Firmware Search vendor "Huawei" for product "S5700si Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700si Search vendor "Huawei" for product "S5700si"	-	-	Safe
Huawei Search vendor "Huawei"	S5710ei Firmware Search vendor "Huawei" for product "S5710ei Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5710ei Search vendor "Huawei" for product "S5710ei"	-	-	Safe
Huawei Search vendor "Huawei"	S5710hi Firmware Search vendor "Huawei" for product "S5710hi Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5710hi Search vendor "Huawei" for product "S5710hi"	-	-	Safe
Huawei Search vendor "Huawei"	S6700 Firmware Search vendor "Huawei" for product "S6700 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S6700 Search vendor "Huawei" for product "S6700"	-	-	Safe
Huawei Search vendor "Huawei"	S2750 Firmware Search vendor "Huawei" for product "S2750 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S2750 Search vendor "Huawei" for product "S2750"	-	-	Safe
Huawei Search vendor "Huawei"	S5700li Firmware Search vendor "Huawei" for product "S5700li Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700li Search vendor "Huawei" for product "S5700li"	-	-	Safe
Huawei Search vendor "Huawei"	S5700s-li Firmware Search vendor "Huawei" for product "S5700s-li Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700s-li Search vendor "Huawei" for product "S5700s-li"	-	-	Safe
Huawei Search vendor "Huawei"	S5720hi Firmware Search vendor "Huawei" for product "S5720hi Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5720hi Search vendor "Huawei" for product "S5720hi"	-	-	Safe
Huawei Search vendor "Huawei"	S2750 Firmware Search vendor "Huawei" for product "S2750 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S2750 Search vendor "Huawei" for product "S2750"	-	-	Safe
Huawei Search vendor "Huawei"	S5700li Firmware Search vendor "Huawei" for product "S5700li Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700li Search vendor "Huawei" for product "S5700li"	-	-	Safe
Huawei Search vendor "Huawei"	S5700s-li Firmware Search vendor "Huawei" for product "S5700s-li Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5700s-li Search vendor "Huawei" for product "S5700s-li"	-	-	Safe
Huawei Search vendor "Huawei"	S5720hi Firmware Search vendor "Huawei" for product "S5720hi Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5720hi Search vendor "Huawei" for product "S5720hi"	-	-	Safe
Huawei Search vendor "Huawei"	S5720ei Firmware Search vendor "Huawei" for product "S5720ei Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	S5720ei Search vendor "Huawei" for product "S5720ei"	-	-	Safe
Huawei Search vendor "Huawei"	Te60 Firmware Search vendor "Huawei" for product "Te60 Firmware"	-	-	Affected	in	Huawei Search vendor "Huawei"	Te60 Search vendor "Huawei" for product "Te60"	-	-	Safe
Oracle Search vendor "Oracle"		Communications Application Session Controller Search vendor "Oracle" for product "Communications Application Session Controller"				>= 3.0.0 <= 3.9.0 Search vendor "Oracle" for product "Communications Application Session Controller" and version " >= 3.0.0 <= 3.9.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Policy Management Search vendor "Oracle" for product "Communications Policy Management"				< 9.9.2 Search vendor "Oracle" for product "Communications Policy Management" and version " < 9.9.2"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				11.1.1.7.0 Search vendor "Oracle" for product "Http Server" and version "11.1.1.7.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				11.1.1.9.0 Search vendor "Oracle" for product "Http Server" and version "11.1.1.9.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				12.1.3.0.0 Search vendor "Oracle" for product "Http Server" and version "12.1.3.0.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				12.2.1.1.0 Search vendor "Oracle" for product "Http Server" and version "12.2.1.1.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				12.2.1.2.0 Search vendor "Oracle" for product "Http Server" and version "12.2.1.2.0"		-		Affected
Oracle Search vendor "Oracle"		Integrated Lights Out Manager Firmware Search vendor "Oracle" for product "Integrated Lights Out Manager Firmware"				>= 3.0.0 <= 3.2.11 Search vendor "Oracle" for product "Integrated Lights Out Manager Firmware" and version " >= 3.0.0 <= 3.2.11"		-		Affected
Oracle Search vendor "Oracle"		Integrated Lights Out Manager Firmware Search vendor "Oracle" for product "Integrated Lights Out Manager Firmware"				>= 4.0.0 <= 4.0.4 Search vendor "Oracle" for product "Integrated Lights Out Manager Firmware" and version " >= 4.0.0 <= 4.0.4"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0"		-		Affected
Redhat Search vendor "Redhat"		Satellite Search vendor "Redhat" for product "Satellite"				5.7 Search vendor "Redhat" for product "Satellite" and version "5.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				5.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				6.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				7.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				6.6 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "6.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.1 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.1"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.2 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.2"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.3 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.3"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.4 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.4"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.5 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.5"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.6 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.7 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				5.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				6.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				7.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus"				6.6 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "6.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus"				7.3 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.3"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus"				7.4 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.4"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus"				7.6 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Aus Search vendor "Redhat" for product "Enterprise Linux Server Aus"				7.7 Search vendor "Redhat" for product "Enterprise Linux Server Aus" and version "7.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus"				7.3 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.3"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus"				7.6 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Tus Search vendor "Redhat" for product "Enterprise Linux Server Tus"				7.7 Search vendor "Redhat" for product "Enterprise Linux Server Tus" and version "7.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				5.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				6.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				7.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "7.0"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Debuginfo Search vendor "Suse" for product "Linux Enterprise Debuginfo"				11 Search vendor "Suse" for product "Linux Enterprise Debuginfo" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Debuginfo Search vendor "Suse" for product "Linux Enterprise Debuginfo"				11 Search vendor "Suse" for product "Linux Enterprise Debuginfo" and version "11"		sp4		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				13.1 Search vendor "Opensuse" for product "Opensuse" and version "13.1"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Desktop Search vendor "Suse" for product "Linux Enterprise Desktop"				11 Search vendor "Suse" for product "Linux Enterprise Desktop" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Desktop Search vendor "Suse" for product "Linux Enterprise Desktop"				11 Search vendor "Suse" for product "Linux Enterprise Desktop" and version "11"		sp4		Affected
Suse Search vendor "Suse"		Linux Enterprise Desktop Search vendor "Suse" for product "Linux Enterprise Desktop"				12 Search vendor "Suse" for product "Linux Enterprise Desktop" and version "12"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				10 Search vendor "Suse" for product "Linux Enterprise Server" and version "10"		sp4, ltss		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp1, ltss		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp2, ltss		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp3, vmware		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				12 Search vendor "Suse" for product "Linux Enterprise Server" and version "12"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				11 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				12 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "12"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04"		esm		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"		esm		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				15.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "15.04"		-		Affected
Huawei Search vendor "Huawei"		Oceanstor Replicationdirector Search vendor "Huawei" for product "Oceanstor Replicationdirector"				v100r003c00 Search vendor "Huawei" for product "Oceanstor Replicationdirector" and version "v100r003c00"		-		Affected
Huawei Search vendor "Huawei"		Policy Center Search vendor "Huawei" for product "Policy Center"				v100r003c00 Search vendor "Huawei" for product "Policy Center" and version "v100r003c00"		-		Affected
Huawei Search vendor "Huawei"		Policy Center Search vendor "Huawei" for product "Policy Center"				v100r003c10 Search vendor "Huawei" for product "Policy Center" and version "v100r003c10"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v100r002c01 Search vendor "Huawei" for product "Smc2.0" and version "v100r002c01"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v100r002c02 Search vendor "Huawei" for product "Smc2.0" and version "v100r002c02"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v100r002c03 Search vendor "Huawei" for product "Smc2.0" and version "v100r002c03"		-		Affected
Huawei Search vendor "Huawei"		Smc2.0 Search vendor "Huawei" for product "Smc2.0"				v100r002c04 Search vendor "Huawei" for product "Smc2.0" and version "v100r002c04"		-		Affected
Huawei Search vendor "Huawei"		Ultravr Search vendor "Huawei" for product "Ultravr"				v100r003c00 Search vendor "Huawei" for product "Ultravr" and version "v100r003c00"		-		Affected
Ibm Search vendor "Ibm"		Cognos Metrics Manager Search vendor "Ibm" for product "Cognos Metrics Manager"				10.1 Search vendor "Ibm" for product "Cognos Metrics Manager" and version "10.1"		-		Affected
Ibm Search vendor "Ibm"		Cognos Metrics Manager Search vendor "Ibm" for product "Cognos Metrics Manager"				10.1.1 Search vendor "Ibm" for product "Cognos Metrics Manager" and version "10.1.1"		-		Affected
Ibm Search vendor "Ibm"		Cognos Metrics Manager Search vendor "Ibm" for product "Cognos Metrics Manager"				10.2 Search vendor "Ibm" for product "Cognos Metrics Manager" and version "10.2"		-		Affected
Ibm Search vendor "Ibm"		Cognos Metrics Manager Search vendor "Ibm" for product "Cognos Metrics Manager"				10.2.1 Search vendor "Ibm" for product "Cognos Metrics Manager" and version "10.2.1"		-		Affected
Ibm Search vendor "Ibm"		Cognos Metrics Manager Search vendor "Ibm" for product "Cognos Metrics Manager"				10.2.2 Search vendor "Ibm" for product "Cognos Metrics Manager" and version "10.2.2"		-		Affected