VDB
GCVE-110-CERTCC-2015-243585
GCVE-110-CERTCC-2015-243585
Advisory PublishedCVSS 7.8/10
Some implementations of SSL/TLS accept export-grade (512-bit or smaller) RSA keys even when not specifically requesting export grade ciphers. An attacker able to act as a Man-in-The-Middle (MiTM) could factor weak temporary RSA keys, obtain session keys, and decrypt SSL/TLS trafflc. This issue has been dubbed the "FREAK" (Factoring Attack on RSA-EXPORT Keys) attack.
Risk Scores
CVSS 2.0
7.8/10
High · AV:N/AC:L/Au:N/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population4d1_direct_report0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.4remediation_levelOFreport_confidenceCenvironmental_score6.43545140112target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND
References
Browse GCVE Records
72,664 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.