CVE-2015-20112

{"id": "CVE-2015-20112", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 3.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}]}, "published": "2025-06-29T21:15:22.210", "references": [{"url": "https://github.com/LaurentMT/go-ethereum/commit/e8cba7283b57280b1bcf5761478f852398365901", "source": "cve@mitre.org"}, {"url": "https://github.com/ethereum/devp2p/blob/master/rlpx.md#known-issues-in-the-current-version", "source": "cve@mitre.org"}, {"url": "https://github.com/ethereum/devp2p/issues/32", "source": "cve@mitre.org"}, {"url": "https://github.com/ethereum/go-ethereum/issues/1315", "source": "cve@mitre.org"}, {"url": "https://github.com/hyperledger/besu/issues/7926", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-325"}]}], "descriptions": [{"lang": "en", "value": "RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network."}, {"lang": "es", "value": "RLPx 5 cuenta con dos flujos CTR basados en la misma clave, IV y nonce. Esto facilita el descifrado en una red privada."}], "lastModified": "2025-06-30T18:38:23.493", "sourceIdentifier": "cve@mitre.org"}