Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-9231

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:fee06909d4fd2340694b35f31bab394f2452523b80e50eef8748f4b1fb17c43a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 20 assertions

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/13

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/15

{"defaultStatus":"unknown","product":"SCALANCE XCM328","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/5

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/10

{"defaultStatus":"unknown","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/2

{"defaultStatus":"unknown","product":"SCALANCE XCM332","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/6

{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/0

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230 V AC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/8

{"defaultStatus":"unaffected","product":"OpenSSL","vendor":"OpenSSL","versions":[{"lessThan":"3.5.4","status":"affected","version":"3.5.0","versionType":"semver"},{"lessThan":"3.4.3","status":"affected","version":"3.4.0","versionType":"semver"},{"lessThan":"3.3.5","status":"affected","version":"3.3.0","versionType":"semver"},{"lessThan":"3.2.6","status":"affected","version":"3.2.0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/7

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24 V DC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/11

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/16

{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/1

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/14

{"defaultStatus":"unknown","product":"SIMATIC CN 4100","vendor":"Siemens","versions":[{"lessThan":"V5.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/18

{"defaultStatus":"unknown","product":"SCALANCE XCM324","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/4

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230 V AC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/9

{"defaultStatus":"unknown","product":"SCALANCE XCH328","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/3

{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24 V DC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/12

{"defaultStatus":"unknown","product":"SIDIS Secured SmartPlug","vendor":"Siemens","versions":[{"lessThan":"V7.26.0310","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/17

Affected products and versions

20 source assertions
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/13
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/15
{"defaultStatus":"unknown","product":"SCALANCE XCM328","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/5
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/10
{"defaultStatus":"unknown","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/2
{"defaultStatus":"unknown","product":"SCALANCE XCM332","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/6
{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/0
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230 V AC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/8
{"defaultStatus":"unaffected","product":"OpenSSL","vendor":"OpenSSL","versions":[{"lessThan":"3.5.4","status":"affected","version":"3.5.0","versionType":"semver"},{"lessThan":"3.4.3","status":"affected","version":"3.4.0","versionType":"semver"},{"lessThan":"3.3.5","status":"affected","version":"3.3.0","versionType":"semver"},{"lessThan":"3.2.6","status":"affected","version":"3.2.0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/7
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24 V DC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/11
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/16
{"defaultStatus":"unknown","product":"RUGGEDCOM RST2428P","vendor":"Siemens","versions":[{"lessThan":"V4.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/1
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/14
{"defaultStatus":"unknown","product":"SIMATIC CN 4100","vendor":"Siemens","versions":[{"lessThan":"V5.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/18
{"defaultStatus":"unknown","product":"SCALANCE XCM324","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/4
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (230 V AC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/9
{"defaultStatus":"unknown","product":"SCALANCE XCH328","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/3
{"defaultStatus":"unknown","product":"SCALANCE XRM334 (24 V DC, 8xFO)","vendor":"Siemens","versions":[{"lessThan":"V3.3","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/12
{"defaultStatus":"unknown","product":"SIDIS Secured SmartPlug","vendor":"Siemens","versions":[{"lessThan":"V7.26.0310","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/affected/17

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-385","description":"CWE-385 Covert Timing Channel","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/problemTypes/0/descriptions/0

Source references

11 source assertions
{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/1/references/0
{"url":"http://www.openwall.com/lists/oss-security/2026/05/11/11"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/1/references/1
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/references/1
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/references/0
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/references/2
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/adp/2/references/3
{"name":"3.3.5 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/references/3
{"name":"3.2.6 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/references/4
{"name":"3.4.3 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/references/2
{"name":"3.5.4 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/references/1
{"name":"OpenSSL Advisory","tags":["vendor-advisory"],"url":"https://openssl-library.org/news/secadv/20250930.txt"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7338f6b4a5a2a93243477d7079bacbd2bde6f149c873536d10b44221024c5c54 · sha256:7a2d0e68ed2fb7c3… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer