CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects OpenSSL. Its EPSS score suggests a 13.3% probability of exploitation in the next 30 days.
CVE
CVE-2014-3511
Severity
MEDIUM
CVSS
4.3
EPSS
13.33%
OpenSSL
Original NVD Description
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.