Cryptographic Vulnerability in Ethereum's RLPx Protocol from Hyperledger

CVE-2015-20112

What is CVE-2015-20112?

The RLPx Protocol version 5 has been identified to contain a severe cryptographic design flaw where two CTR (Counter) streams utilize the same key, initialization vector (IV), and nonce. This vulnerability poses significant risks as it could allow an attacker to decrypt traffic across private networks, compromising the confidentiality of transmitted data. Mitigation efforts are crucial to prevent unauthorized access to sensitive information within affected infrastructures.

References