VulnSocial

CVE-2002-20001General(balasys / aruba_cx_4100i)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.

balasys CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aruba_cx_4100i
  • aruba_cx_6100
  • aruba_cx_6200f
  • aruba_cx_6200m

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-08-28); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
balasysf5hpesiemensstormshieldsuse
Products
aruba_cx_4100iaruba_cx_6100aruba_cx_6200faruba_cx_6200maruba_cx_6300faruba_cx_6300maruba_cx_6405aruba_cx_6410aruba_cx_8320aruba_cx_8325-32c

13 versions affected across 49 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-28: 1Mentions · 2026-08-30: 1Technical Details · 2026-08-30: 108-2808-30
Signal classification1 categories
General
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • ゆぅさん@YY20424277
    General

    もし自分の現場で「Diffie-Hellman鍵交換におけるサービス運用妨害（DoS）の脆弱性（CVE-2002-20001）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 書籍一覧(Kindle): https://www.intect-i.jp/book/?utm_source=sns&utm_medium=social&utm_campaign=kindle

    Post summary

    The post poses a general question about initial response steps for CVE-2002-20001, offering minimal technical context without any PoC, exploit, patch, or evidence of active exploitation.

    0000051
    843 followersView on X
  • ゆぅさん@YY20424277
    General

    「Diffie-Hellman鍵交換におけるサービス運用妨害（DoS）の脆弱性（CVE-2002-20001）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ note道場 (月1,280円・初月無料): https://note.com/yuusan_security/membership

    Post summary

    The message is a simple request for guidance on writing a one-page board post about CVE‑2002‑20001, offering no additional details or indicators of exploits, patches, or technical depth.

    0000054
    841 followersView on X
CPE platform detail76 entries

76 of 76 entries

PartVendorProductVersionTarget SWTarget HW
Appbalasysdheater---
Appf5big-ip_access_policy_manager---
Appf5big-ip_advanced_firewall_manager---
Appf5big-ip_advanced_firewall_manager17.5.0--
Appf5big-ip_advanced_web_application_firewall---
Appf5big-ip_advanced_web_application_firewall17.5.0--
Appf5big-ip_analytics---
Appf5big-ip_analytics17.5.0--
Appf5big-ip_application_acceleration_manager---
Appf5big-ip_application_acceleration_manager17.5.0--
Appf5big-ip_application_security_manager---
Appf5big-ip_application_security_manager17.5.0--
Appf5big-ip_application_visibility_and_reporting---
Appf5big-ip_application_visibility_and_reporting17.5.0--
Appf5big-ip_carrier-grade_nat---
Appf5big-ip_carrier-grade_nat17.5.0--
Appf5big-ip_ddos_hybrid_defender---
Appf5big-ip_ddos_hybrid_defender17.5.0--
Appf5big-ip_domain_name_system---
Appf5big-ip_domain_name_system17.5.0--
Appf5big-ip_edge_gateway---
Appf5big-ip_edge_gateway17.5.0--
Appf5big-ip_fraud_protection_service---
Appf5big-ip_fraud_protection_service17.5.0--
Appf5big-ip_global_traffic_manager---
Appf5big-ip_global_traffic_manager17.5.0--
Appf5big-ip_link_controller---
Appf5big-ip_link_controller17.5.0--
Appf5big-ip_local_traffic_manager---
Appf5big-ip_local_traffic_manager17.5.0--
Appf5big-ip_policy_enforcement_manager---
Appf5big-ip_policy_enforcement_manager17.5.0--
Appf5big-ip_service_proxy1.6.0kubernetes-
Appf5big-ip_ssl_orchestrator---
Appf5big-ip_ssl_orchestrator17.5.0--
Appf5big-ip_webaccelerator---
Appf5big-ip_webaccelerator17.5.0--
Appf5big-ip_websafe---
Appf5big-ip_websafe17.5.0--
Appf5big-iq_centralized_management---
Appf5big-iq_centralized_management7.1.0--
OSf5f5os-a---
OSf5f5os-a1.8.0--
OSf5f5os-c---
OSf5f5os-c1.5.0--
OSf5f5os-c1.5.1--
OSf5f5os-c1.8.0--
OSf5f5os-c1.8.1--
Appf5traffix_signaling_delivery_controller5.1.0--
Appf5traffix_signaling_delivery_controller5.2.0--
HWhpearuba_cx_4100i---
HWhpearuba_cx_6100---
HWhpearuba_cx_6200f---
HWhpearuba_cx_6200m---
HWhpearuba_cx_6300f---
HWhpearuba_cx_6300m---
HWhpearuba_cx_6405---
HWhpearuba_cx_6410---
HWhpearuba_cx_8320---
HWhpearuba_cx_8325-32c---
HWhpearuba_cx_8325-48y8c---
HWhpearuba_cx_8360-12c---
HWhpearuba_cx_8360-16y2c---
HWhpearuba_cx_8360-24xf2c---
HWhpearuba_cx_8360-32y4c---
HWhpearuba_cx_8360-48xt4c---
HWhpearuba_cx_8360-48y6c---
HWhpearuba_cx_8400---
OShpearubaos-cx---
HWsiemensscalance_w1750d---
OSsiemensscalance_w1750d_firmware---
Appstormshieldstormshield_management_center---
Appstormshieldstormshield_network_security---
OSsuselinux_enterprise_server11--
OSsuselinux_enterprise_server12--
OSsuselinux_enterprise_server15--

Explore more

Back to dashboardbalasys CVEsf5 CVEshpe CVEsaruba_cx_4100i vulnerabilities