CVE-2018-5762 — MEDIUM (5.9)

Q: How severe is CVE-2018-5762?

CVE-2018-5762 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2018-5762?

Check the references section above for vendor advisories and patch information. Affected products include: Unisys Clearpath Mcp.

Vulnerability Description

The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 (IC #17), and 60.0 before 60.044 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Unisys	Clearpath Mcp	>= 58.1, < 58.160

References

https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspVendor Advisory
https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspVendor Advisory

FAQ

What is CVE-2018-5762?

CVE-2018-5762 is a vulnerability with a CVSS score of 5.9 (MEDIUM). The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 (IC #17), and 60.0 before 60.044 might allow remote atta...

How severe is CVE-2018-5762?

CVE-2018-5762 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-5762?

Check the references section above for vendor advisories and patch information. Affected products include: Unisys Clearpath Mcp.