OpenSSL RSA padding rollback (CVE-2021-23839)

Summary

An SSLv2 rollback vulnerability exists if OpenSSL is improperly configured.

Vulnerability ID	Vulnerability Overview
CVE-2021-23839	If an application still supports the deprecated SSLv2 protocol, a padding vulnerability allows attackers to decrypt RSA encrypted ciphertexts.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices