CVE-2017-15533

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish multiple millions of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session.

• CWE-203

• http://www.securityfocus.com/bid/104163Third Party Advisory, VDB Entry
• https://www.symantec.com/security-center/network-protection-security-advisories/SA160Vendor Advisory
• http://www.securityfocus.com/bid/104163Third Party Advisory, VDB Entry
• https://www.symantec.com/security-center/network-protection-security-advisories/SA160Vendor Advisory

Published

May 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15528Prior to v 7.6, the Install Norton Security (INS) product ca…3.7
• CVE-2017-15529Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-1553IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to …
• CVE-2017-15530Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-15531Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.…
• CVE-2017-15532Prior to 10.6.4, Symantec Messaging Gateway may be susceptib…
• CVE-2017-15534The Norton App Lock prior to version 1.3.0.13 can be suscept…
• CVE-2017-15535MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a di…
• CVE-2017-15536An issue was discovered in Cloudera Data Science Workbench (…
• CVE-2017-15537The x86/fpu (Floating Point Unit) subsystem in the Linux ker…
• CVE-2017-15538Stored XSS vulnerability in the Media Objects component of I…
• CVE-2017-15539SQL Injection exists in zorovavi/blog through 2017-10-17 via…