H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-05-04
Last seen2022-05-04

Confidence

—

The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.

Labels

exploitedkev

CISA KEV context

Vendor / productOpenSSL OpenSSL
Added2022-05-04
Due date2022-05-25
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2014-0160
open
cwe
CWE-125
open