Skip to content
Fencer Intel
low 3.7

CVE-2020-1968 json

Raccoon attack

published 2020-09-09 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-12758

cvss
3.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
4.9%
EPSS 4.9% chance of exploitation in 30 days, percentile 92%
public exploits
0
none known

Summary

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).

Patch / fix

  • fujitsu m10-1_firmware xcp2400, xcp3100
  • fujitsu m10-4_firmware xcp2400, xcp3100
  • fujitsu m10-4s_firmware xcp2400, xcp3100
  • fujitsu m12-1_firmware xcp2400, xcp3100
  • fujitsu m12-2_firmware xcp2400, xcp3100
  • fujitsu m12-2s_firmware xcp2400, xcp3100
  • openssl Debian 14, Debian 13, Debian 12 1.1.0c-1

debian advisories DEBIAN-CVE-2020-1968

  • openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu4.17
  • openssl1.0 Ubuntu 18.04 LTS 1.0.2n-1ubuntu5.4
  • openssl Ubuntu Pro 14.04 LTS 1.0.1f-1ubuntu2.27+esm10
  • openssl Ubuntu Pro FIPS-updates 16.04 LTS 1.0.2g-1ubuntu4.fips.4.17.1

ubuntu advisories UBUNTU-CVE-2020-1968

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • openssl1 SLES 11-SECURITY 1.0.1g-0.58.27.2
  • openssl SLES 11 SP4-LTSS, SLE Point of Sale 11 SP3 0.9.8j-0.106.34.1
  • compat-openssl098 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +2 more 0.9.8j-106.21.1

suse advisories SUSE-SU-2020:14511-1SUSE-SU-2020:14491-1SUSE-SU-2020:2634-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-1968 updated cvss 5.9

openssl: Information exposure when DH secret are reused across multiple TLS connections

  • Red Hat Enterprise Linux 5 openssl, openssl097a Red Hat Enterprise Linux 6 openssl, openssl098e, openssl-perl
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 7 openssl, openssl098e, openssl-libs, openssl-perl Red Hat Enterprise Linux 8 mingw-openssl, mingw32-openssl, mingw64-openssl, compat-openssl10
    affected: workaround, no fix available “Fix deferred”
  • Red Hat JBoss Enterprise Application Platform 5 openssl Red Hat JBoss Enterprise Application Platform 6 openssl Red Hat JBoss Enterprise Web Server 2 openssl, jbcs-httpd24-openssl jbcs-httpd24-openssl
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Advanced Cluster Management for Kubernetes 2 openssl Red Hat Enterprise Linux 7 ovmf, OVMF, AAVMF Red Hat Enterprise Linux 8 openssl, openssl-libs, openssl-perl Red Hat JBoss Core Services jbcs-httpd24-openssl jbcs-httpd24-openssl
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-22-242-01 updated cvss 8.1

Hitachi Energy FACTS Control Platform (FCP) Product

  • Hitachi Energy FCP >= 3.0.0, <= 3.12.0, >= 1.1.0, <= 1.3.0, >= 2.1.0, <= 2.3.0
    affected: vendor fix, mitigation “Physically protect process control systems from unauthorized direct access.” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-22-242-02 updated cvss 8.1

Hitachi Energy Gateway Station (GWS) Product

  • Hitachi Energy GWS 3.1.0.0, <= 2.0.0.0, 2.2.0.0, 2.3.0.0
    affected: vendor fix, mitigation “Physically protect process control systems from unauthorized direct access.” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-22-116-01 updated cvss 3.7

Hitachi Energy System Data Manager

  • Hitachi Energy All System Data Manager - SDM600 <1.2 FP2 HF10 (Build Nr. 1.2.14002.506)
    affected: mitigation “Implement and continuously revise least privileges principles to minimize permissions and accesses to SDM600 related resources.” hitachiabb-powergrids.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-22-111-03 updated cvss 3.7

Hitachi Energy MicroSCADA Pro/X SYS600

  • Hitachi Energy SYS600 <= 10.1.1, <=9.4 FP1, >= 10.2.1, >= 10.0.0, <= 10.2.1
    affected: mitigation “For more information see Hitachi Energy advisory 8DBD000075” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-21-336-08 updated cvss 3.7

Hitachi Energy RTU500 series

  • Hitachi Energy RTU500 series CMU Firmware 12.2.*, 13.1.*, 13.0.*, 12.0.*
    affected: vendor fix, mitigation “Physically protect process control systems from direct access by unauthorized personnel.” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
6 mo ago

Exploit prediction

4.90% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CISA ADP 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

  • OpenSSL OpenSSL

Classification

Weakness
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.