What’s Vulnerable › Vulnerabilities

CVE-2017-13099: wolfSSL Bleichenbacher/ROBOT

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 27.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-12-13 · updated 2026-06-17
• Weakness: CWE-203

Description

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."

Affected products

• Arubanetworks Instant: before 6.5.4.6 — fixed in 6.5.4.6
• Siemens Scalance W1750D Firmware: before 8.3.0.1 — fixed in 8.3.0.1
• wolfSSL: before 3.12.2 — fixed in 3.12.2

How to fix

Upgrade to a fixed version: Arubanetworks Instant 6.5.4.6; Siemens Scalance W1750D Firmware 8.3.0.1; wolfSSL 3.12.2. Check the vendor advisory for mitigations.

References

• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-002.txt
• http://www.kb.cert.org/vuls/id/144389
• http://www.securityfocus.com/bid/102174
• https://cert-portal.siemens.com/productcert/pdf/ssa-464260.pdf
• https://github.com/wolfSSL/wolfssl/pull/1229
• https://robotattack.org/
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-002.txt
• http://www.kb.cert.org/vuls/id/144389
• http://www.securityfocus.com/bid/102174
• https://cert-portal.siemens.com/productcert/pdf/ssa-464260.pdf
• https://github.com/wolfSSL/wolfssl/pull/1229
• https://robotattack.org/

Get alerted when CVE-2017-13099 or the next vulnerability affects your stack