CVSS v2 Base Score
s2_srvr.c overwrites the wrong bytes in the master-key when applying Bleichenbacher protection for export cipher suites. This provides a Bleichenbacher oracle, and could potentially allow more efficient variants of the DROWN attack.
Find more about CVE-2016-0704 from MITRE CVE directory.
All FoxT products have the SSLv2 protocol disabled and are thus not affected by this vulnerability.
Still have questions? We can help. Submit a case to Technical Support.