CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It may be remotely exploitable.
CVE
CVE-2014-2903
Severity
MEDIUM
CVSS
5.9
EPSS
0.96%
Original NVD Description
CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake.
Related CVEs
Other vulnerabilities affecting the same vendor(s)