wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos Cx | — | Upgrade Aruba AOS-CX to a fixed version | Feb 24, 2025 | Feb 22, 2022 |
| Debian | — | Upgrade wolfssl | Jul 30, 2024 | Dec 13, 2017 |
| Oracle Solaris | — | Upgrade runtime/erlang to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/erlang/documentation to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Dec 12, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 13, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub