TI-2017-11355 Aliases CVE-2017-15533 GHSA-g56c-h972-7rhp

Observable discrepancy in Symantec SSL Visibility

LOW 30CWE-203Published 2018-05-17 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-203.

Summary

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish multiple millions of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session.

Why it matters now

EPSS 0.01802 78th percentileScored 2026-11-07

Fix Fixed SSL Visibility (SSLV) (Symantec Corporation): 3.10.4.1, 3.12.2.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Symantec	SSL Visibility (SSLV)	3.8.4FC; 3.10 to before 3.10.4.1; 3.11; 3.12 to before 3.12.2.1	3.10.4.1, 3.12.2.1	Patch available	CNA

SSL Visibility (SSLV) VendorSymantec Affected 3.8.4FC; 3.10 to before 3.10.4.1; 3.11; 3.12 to before 3.12.2.1 Fixed in 3.10.4.1, 3.12.2.1 Patch available CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.8.4fc:::::::*	3.8.4fc	Vulnerable	Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.10:::::::*	3.10	Vulnerable	Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.11:::::::*	3.11	Vulnerable	Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.12:::::::*	3.12	Vulnerable	Broadcom

cpe:2.3:a:broadcom:ssl_visibility_appliance:3.8.4fc:*:*:*:*:*:*:* Versions 3.8.4fc Vulnerable ·Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Broadcom
cpe:2.3:a:broadcom:ssl_visibility_appliance:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Broadcom

Remediation

Fix · CNA SSL Visibility (SSLV) (Symantec Corporation) Fixed in 3.10.4.1, 3.12.2.1

Timeline

2026-10-02 Threatist record created from CVE-2017-15533
2026-10-03 Alias added: GHSA-g56c-h972-7rhp

References

Advisory 1

https://www.symantec.com/security-center/network-protection-security-advisories/SA160

TI-2017-04157 Command injection in Symantec Messaging Gateway KEVCVSS 3.1HIGH 8.8
TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
TI-2017-04156 The Symantec Messaging Gateway can encounter an issue of remote code execution, which… CVSS 3.0CRITICAL 10.0
TI-2012-00284 The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict… CVSS 2.0HIGH 10.0
TI-2006-02539 Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows… CVSS 2.0HIGH 10.0
TI-2012-02563 The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote… CVSS 2.0HIGH 10.0

See all 597 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences