CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct…

Medium · published March 14, 2013

Patch now

High probability of exploitation

CVSS calls it medium at 5.9. It sits in the 99.7th percentile for exploit probability.

CVSS v3.1
5.9
EPSS
84%
Percentile
99.7
In the wild
Unconfirmed
What it is

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.84424 · 99.7th percentile
Published
2013-03-14T22:00Z
EPSS history
Timeline
  • 14 MAR 22:00Z
    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct…
    cvelistv5