AND
     OR
          *cpe:2.3:o:siemens:simatic_rf615r_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.2.1
     OR
          cpe:2.3:h:siemens:simatic_rf615r:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_rf68xr_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.2.1
     OR
          cpe:2.3:h:siemens:simatic_rf68xr:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* versions from (including) 7.10.6 up to (including) 7.23.1

OR
     *cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_

OR
     *cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*
     *cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
     *cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*
     *cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*
     *cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

NIST CWE-326

NIST CWE-20

http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/ No Types Assigned

http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/ Third Party Advisory

http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx No Types Assigned

http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx Third Party Advisory

http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx No Types Assigned

http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx Third Party Advisory

http://curl.haxx.se/docs/adv_20120124B.html No Types Assigned

http://curl.haxx.se/docs/adv_20120124B.html Third Party Advisory

http://downloads.asterisk.org/pub/security/AST-2016-001.html No Types Assigned

http://downloads.asterisk.org/pub/security/AST-2016-001.html Third Party Advisory

http://ekoparty.org/2011/juliano-rizzo.php No Types Assigned

http://ekoparty.org/2011/juliano-rizzo.php Broken Link

http://eprint.iacr.org/2004/111 No Types Assigned

http://eprint.iacr.org/2004/111 Third Party Advisory

http://eprint.iacr.org/2006/136 No Types Assigned

http://eprint.iacr.org/2006/136 Third Party Advisory

http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html No Types Assigned

http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html Not Applicable, Vendor Advisory

http://isc.sans.edu/diary/SSL+TLS+part+3+/11635 No Types Assigned

http://isc.sans.edu/diary/SSL+TLS+part+3+/11635 Third Party Advisory

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html No Types Assigned

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html Broken Link

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html No Types Assigned

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html Broken Link

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html No Types Assigned

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html Broken Link, Mailing List

http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html No Types Assigned

http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html Broken Link, Mailing List

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html No Types Assigned

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html Broken Link, Mailing List

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html No Types Assigned

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html Broken Link, Mailing List

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html No Types Assigned

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html Broken Link, Mailing List

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html Broken Link

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html Broken Link

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html Broken Link

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html Broken Link

http://marc.info/?l=bugtraq&m=132750579901589&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=132750579901589&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=132872385320240&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=132872385320240&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=133365109612558&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=133365109612558&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=133728004526190&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=133728004526190&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=134254866602253&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=134254866602253&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://marc.info/?l=bugtraq&m=134254957702612&w=2 No Types Assigned

http://marc.info/?l=bugtraq&m=134254957702612&w=2 Issue Tracking, Mailing List, Third Party Advisory

http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue No Types Assigned

http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue Third Party Advisory

http://osvdb.org/74829 No Types Assigned

http://osvdb.org/74829 Broken Link

http://rhn.redhat.com/errata/RHSA-2012-0508.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2012-0508.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1455.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-1455.html Broken Link

http://secunia.com/advisories/45791 Vendor Advisory

http://secunia.com/advisories/45791 Not Applicable

http://secunia.com/advisories/47998 No Types Assigned

http://secunia.com/advisories/47998 Not Applicable

http://secunia.com/advisories/48256 No Types Assigned

http://secunia.com/advisories/48256 Not Applicable

http://secunia.com/advisories/48692 No Types Assigned

http://secunia.com/advisories/48692 Not Applicable

http://secunia.com/advisories/48915 No Types Assigned

http://secunia.com/advisories/48915 Not Applicable

http://secunia.com/advisories/48948 No Types Assigned

http://secunia.com/advisories/48948 Not Applicable

http://secunia.com/advisories/49198 No Types Assigned

http://secunia.com/advisories/49198 Not Applicable

http://secunia.com/advisories/55322 No Types Assigned

http://secunia.com/advisories/55322 Not Applicable

http://secunia.com/advisories/55350 No Types Assigned

http://secunia.com/advisories/55350 Not Applicable

http://secunia.com/advisories/55351 No Types Assigned

http://secunia.com/advisories/55351 Not Applicable

http://security.gentoo.org/glsa/glsa-201203-02.xml No Types Assigned

http://security.gentoo.org/glsa/glsa-201203-02.xml Third Party Advisory

http://security.gentoo.org/glsa/glsa-201406-32.xml No Types Assigned

http://security.gentoo.org/glsa/glsa-201406-32.xml Third Party Advisory

http://support.apple.com/kb/HT4999 No Types Assigned

http://support.apple.com/kb/HT4999 Third Party Advisory

http://support.apple.com/kb/HT5001 No Types Assigned

http://support.apple.com/kb/HT5001 Third Party Advisory

http://support.apple.com/kb/HT5130 No Types Assigned

http://support.apple.com/kb/HT5130 Third Party Advisory

http://support.apple.com/kb/HT5281 No Types Assigned

http://support.apple.com/kb/HT5281 Broken Link

http://support.apple.com/kb/HT5501 No Types Assigned

http://support.apple.com/kb/HT5501 Third Party Advisory

http://support.apple.com/kb/HT6150 No Types Assigned

http://support.apple.com/kb/HT6150 Third Party Advisory

http://technet.microsoft.com/security/advisory/2588513 No Types Assigned

http://technet.microsoft.com/security/advisory/2588513 Patch, Vendor Advisory

http://vnhacker.blogspot.com/2011/09/beast.html No Types Assigned

http://vnhacker.blogspot.com/2011/09/beast.html Third Party Advisory

http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf No Types Assigned

http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf Third Party Advisory

http://www.debian.org/security/2012/dsa-2398 No Types Assigned

http://www.debian.org/security/2012/dsa-2398 Third Party Advisory

http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html No Types Assigned

http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html Broken Link

http://www.ibm.com/developerworks/java/jdk/alerts/ No Types Assigned

http://www.ibm.com/developerworks/java/jdk/alerts/ Third Party Advisory

http://www.imperialviolet.org/2011/09/23/chromeandbeast.html No Types Assigned

http://www.imperialviolet.org/2011/09/23/chromeandbeast.html Third Party Advisory

http://www.insecure.cl/Beast-SSL.rar Patch

http://www.insecure.cl/Beast-SSL.rar Broken Link, Patch

http://www.kb.cert.org/vuls/id/864643 US Government Resource

http://www.kb.cert.org/vuls/id/864643 Third Party Advisory, US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2012:058 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2012:058 Broken Link

http://www.opera.com/docs/changelogs/mac/1151/ No Types Assigned

http://www.opera.com/docs/changelogs/mac/1151/ Third Party Advisory

http://www.opera.com/docs/changelogs/mac/1160/ No Types Assigned

http://www.opera.com/docs/changelogs/mac/1160/ Third Party Advisory

http://www.opera.com/docs/changelogs/unix/1151/ No Types Assigned

http://www.opera.com/docs/changelogs/unix/1151/ Third Party Advisory

http://www.opera.com/docs/changelogs/unix/1160/ No Types Assigned

http://www.opera.com/docs/changelogs/unix/1160/ Third Party Advisory

http://www.opera.com/docs/changelogs/windows/1151/ No Types Assigned

http://www.opera.com/docs/changelogs/windows/1151/ Third Party Advisory

http://www.opera.com/docs/changelogs/windows/1160/ No Types Assigned

http://www.opera.com/docs/changelogs/windows/1160/ Third Party Advisory

http://www.opera.com/support/kb/view/1004/ Vendor Advisory

http://www.opera.com/support/kb/view/1004/ Third Party Advisory, Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Third Party Advisory

http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-1384.html Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-1384.html Third Party Advisory, Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2012-0006.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2012-0006.html Third Party Advisory

http://www.securityfocus.com/bid/49388 No Types Assigned

http://www.securityfocus.com/bid/49388 Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/49778 No Types Assigned

http://www.securityfocus.com/bid/49778 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1029190 No Types Assigned

http://www.securitytracker.com/id/1029190 Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1025997 No Types Assigned

http://www.securitytracker.com/id?1025997 Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1026103 No Types Assigned

http://www.securitytracker.com/id?1026103 Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1026704 No Types Assigned

http://www.securitytracker.com/id?1026704 Broken Link, Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-1263-1 No Types Assigned

http://www.ubuntu.com/usn/USN-1263-1 Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA12-010A.html US Government Resource

http://www.us-cert.gov/cas/techalerts/TA12-010A.html Third Party Advisory, US Government Resource

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail No Types Assigned

https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail Third Party Advisory

https://bugzilla.novell.com/show_bug.cgi?id=719047 No Types Assigned

https://bugzilla.novell.com/show_bug.cgi?id=719047 Issue Tracking, Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=737506 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=737506 Issue Tracking, Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf Third Party Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006 No Types Assigned

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006 Patch, Vendor Advisory

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 No Types Assigned

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 Broken Link

https://hermes.opensuse.org/messages/13154861 No Types Assigned

https://hermes.opensuse.org/messages/13154861 Broken Link

https://hermes.opensuse.org/messages/13155432 No Types Assigned

https://hermes.opensuse.org/messages/13155432 Broken Link

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 No Types Assigned

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 Third Party Advisory, US Government Resource

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752 No Types Assigned

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752 Third Party Advisory

OR
     *cpe:2.3:a:microsoft:ie:*:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html [No Types Assigned]

https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf [No Types Assigned]

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006 [No Types Assigned]

http://technet.microsoft.com/security/bulletin/MS12-006 [Vendor Advisory]

https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 [No Types Assigned]

http://curl.haxx.se/docs/adv_20120124B.html [No Types Assigned]

http://www.debian.org/security/2012/dsa-2398 [No Types Assigned]

http://secunia.com/advisories/47998 [No Types Assigned]

http://www.securitytracker.com/id?1026704 [No Types Assigned]

http://secunia.com/advisories/48256 [No Types Assigned]

http://security.gentoo.org/glsa/glsa-201203-02.xml [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2012-0508.html [No Types Assigned]

http://www.mandriva.com/security/advisories?name=MDVSA-2012:058 [No Types Assigned]

http://marc.info/?l=bugtraq&m=134254866602253&w=2 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14752 [No Types Assigned]

http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf [No Types Assigned]

http://marc.info/?l=bugtraq&m=133365109612558&w=2

http://marc.info/?l=bugtraq&m=133728004526190&w=2

http://marc.info/?l=bugtraq&m=134254957702612&w=2

http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html

http://seclists.org/fulldisclosure/2015/Apr/5

http://www.securityfocus.com/archive/1/archive/1/535181/100/0/threaded

http://downloads.asterisk.org/pub/security/AST-2016-001.html

El protocolo SSL, como se utiliza en ciertas configuraciones en Microsoft Windows y Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera y otros productos, cifra los datos mediante el uso del modo CBC con vectores de inicialización encadenados, lo que permite a atacantes man-in-the-middle obtener cabeceras HTTP en texto plano a través de un ataque blockwise chosen-boundary (BCBA) en una sesión HTTPS, junto con el código de JavaScript que usa (1) la API WebSocket HTML5, (2) la API J

El protocolo SSL, tal y como se usa en ciertas configuraciones de Microsoft Windows y Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, y otros productos, cifra los datos mediante el uso del modo CBC con vectores de inicialización encadenados, lo que permitiría a atacantes de man-in-the-middle obtener cabeceras HTTP en texto plano a través de un ataque chosen-boundary por bloques (BCBA) en una sesión HTTPS, en conjunto con código JavaScript que utilice (1) HTML5 WebSocket API, 

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html

http://seclists.org/fulldisclosure/2015/Apr/5

http://www.securityfocus.com/archive/1/archive/1/535181/100/0/threaded

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html