CVE-2002-20001

HIGHScheduled

Published:Nov 11, 2021(4 years ago)

Modified:Aug 22, 2025

Remote ExploitNo Auth RequiredNo InteractionLow Complexity

Vulnerability Description

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
balasys	dheater	-	-
siemens	scalance_w1750d_firmware	-	-
suse	linux_enterprise_server	-

Timeline

Published
CVE disclosed publicly
Nov 11, 20214 years ago
Last Modified
Most recent update
Aug 22, 20259 months ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdfThird Party Advisory
https://dheatattack.comThird Party Advisory
https://dheatattack.gitlab.io/Third Party Advisory

CVSS Score

v3.1

7.5/ 10.0

HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

At a Glance

Affected Products

References

balasys / dheater

https://github.com/Balasys/dheaterProduct

https://github.com/mozilla/ssl-config-generator/issues/162Issue Tracking

https://gitlab.com/dheatattack/dheaterThird Party Advisory

https://ieeexplore.ieee.org/document/10374117Technical Description

https://support.f5.com/csp/article/K83120834Third Party Advisory

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txtTechnical Description

https://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/Third Party Advisory

https://www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enf...Issue Tracking

https://www.researchgate.net/profile/Anton-Stiglic-2/publication/24017...Exploit

https://www.suse.com/support/kb/doc/?id=000020510Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdfThird Party Advisory

https://dheatattack.comThird Party Advisory

https://dheatattack.gitlab.io/Third Party Advisory

https://github.com/Balasys/dheaterProduct

https://github.com/mozilla/ssl-config-generator/issues/162Issue Tracking

https://gitlab.com/dheatattack/dheaterThird Party Advisory

https://ieeexplore.ieee.org/document/10374117Technical Description

https://support.f5.com/csp/article/K83120834Third Party Advisory

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txtTechnical Description

https://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/Third Party Advisory

https://www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enf...Issue Tracking

https://www.researchgate.net/profile/Anton-Stiglic-2/publication/24017...Exploit

https://www.suse.com/support/kb/doc/?id=000020510Third Party Advisory

CVSS v3 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

Impact

ScopeUnchanged

ConfidentialityNone

IntegrityNone

AvailabilityHigh

Impact Analysis

ConfidentialityNone

NoneLowHigh

IntegrityNone

NoneLowHigh

AvailabilityHigh

NoneLowHigh

CVE-2002-20001

✦ Vulnerability Description

Attack Characteristics

Affected Software

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

Vulnerability Description