CVE-2018-5762

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-26 · updated 2026-06-17

Description

The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a.17 (IC #17), and 60.0 before 60.044 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

Affected products

Unisys Clearpath Mcp: from 58.1 before 58.160; from 59.1 before 059.1a.17; from 60.0 before 60.044 — fixed in 059.1a.17, 58.160, 60.044

How to fix

Upgrade to a fixed version: Unisys Clearpath Mcp 059.1a.17, 58.160, 60.044. Check the vendor advisory for mitigations.

References

https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=46
https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=46

Get alerted when CVE-2018-5762 or the next vulnerability affects your stack