7.5Alta
CVE-2014-0160
KEV
OpenSSL Information Disclosure Vulnerability
openssl openssl; filezilla-project filezilla server; siemens application processing engine firmware; siemens cp 1543-1 firmware
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, …
100%EPSS