CVE-2024-5800CWE-326

Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime

High · published August 10, 2024

CVSS v4.0
8.3
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a network attacker to decrypt the SSL/TLS communication.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00252 · 15.8th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2024-08-10T03:50Z
EPSS history
Timeline
  • 10 AUG 03:50Z
    Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
    cvelistv5