CVE-2016-10212

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-08 · updated 2026-06-17
Weakness: CWE-200

Description

Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof data via a "forbidden attack," a similar issue to CVE-2016-0270. NOTE: this issue may be due to the use of a third-party Cavium product.

Affected products

Radware Alteon: through 30.0.5.10; through 30.2.1.1

References

http://www.securityfocus.com/bid/96172
https://github.com/nonce-disrespect/nonce-disrespect
https://support.radware.com/app/answers/answer_view/a_id/18456
http://www.securityfocus.com/bid/96172
https://github.com/nonce-disrespect/nonce-disrespect
https://support.radware.com/app/answers/answer_view/a_id/18456

Get alerted when CVE-2016-10212 or the next vulnerability affects your stack