Publication Date – December 20, 2017
Tracking Available December 19, 2017
The Return Of Bleichenbacher's Oracle Threat (ROBOT) attack is a resurfaced RSA encryption vulnerability that allows attackers to passively record TLS/SSL traffic and later decrypt it.
There are a number of enterprise appliances that are known to be vulnerable to this attack. Your data may be at risk if your company or your third parties use them.
To see if a company in your portfolio is vulnerable, go to your portfolio, and then search for “ROBOT (potential)” within the Vulnerability filter.
Refer to the list of devices affected by ROBOT and follow up with your potentially vulnerable third parties to ensure the vulnerability is patched.