GCVE-110-CERTCC-2016-583776

Advisory PublishedCVSS 7.1/10

Vulnetix · Advisory published March 1, 2016

Network traffic encrypted using an RSA-based SSL certificate may be decrypted if enough SSLv2 handshake data can be collected. This is known as the "DROWN" attack in the media.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.1/10

High · AV:N/AC:H/Au:N/C:C/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.1remediation_levelWreport_confidenceCenvironmental_score6.506662176target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:H/IR:H/AR:ND

References

Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack

url

Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack

url

Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack

url

Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack

advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON