Is CVE-2011-3389 being actively exploited?

CVE-2011-3389 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2011-3389?

CVE-2011-3389 has a CVSS 2.0 base score of 4.3 (MEDIUM).

CVE-2011-3389

MEDIUM · CVSS 4.3EPSS 73.3%EU EUVD

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Key facts

CVSS score: 4.3 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness (CWE): CWE-326
EPSS score: 73.3% (99th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2011-3352)
Published: September 6, 2011
NVD last modified: October 9, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2011-3352 in the EU Vulnerability Database. Last updated in EUVD on October 9, 2026.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
google / chrome
haxx / curl
microsoft / internet explorer
microsoft / windows
mozilla / firefox
opera / opera browser
redhat / enterprise linux desktop
redhat / enterprise linux desktop
redhat / enterprise linux eus
redhat / enterprise linux server
redhat / enterprise linux server
redhat / enterprise linux server aus
redhat / enterprise linux workstation
redhat / enterprise linux workstation
siemens / simatic rf615r
siemens / simatic rf615r firmware
siemens / simatic rf68xr
siemens / simatic rf68xr firmware

Certified products that may be affected

35 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Windows OS Loader - Microsoft Corporation - FIPS 140 5405 - active
Windows OS Loader - Microsoft Corporation - FIPS 140 4545 - historical
Windows OS Loader - Microsoft Corporation - FIPS 140 4339 - historical
Windows OS Loader - Microsoft Corporation - FIPS 140 3615 - historical
Windows OS Loader - Microsoft Corporation - FIPS 140 3480 - historical

See all 35 in the Security Certifications Explorer.

References

http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/(Third Party Advisory)
http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx(Third Party Advisory)
http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx(Third Party Advisory)
http://curl.haxx.se/docs/adv_20120124B.html(Third Party Advisory)
http://downloads.asterisk.org/pub/security/AST-2016-001.html(Third Party Advisory)
http://ekoparty.org/2011/juliano-rizzo.php(Broken Link)
http://eprint.iacr.org/2004/111(Third Party Advisory)
http://eprint.iacr.org/2006/136(Third Party Advisory)
http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html(Not Applicable, Vendor Advisory)
http://isc.sans.edu/diary/SSL+TLS+part+3+/11635(Third Party Advisory)
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html(Broken Link)
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html(Broken Link)
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html(Broken Link, Mailing List)
http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html(Broken Link, Mailing List)
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html(Broken Link, Mailing List)
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html(Broken Link, Mailing List)
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html(Broken Link, Mailing List)
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html(Broken Link)
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html(Broken Link)
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html(Broken Link)
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html(Broken Link)
http://marc.info/?l=bugtraq&m=132750579901589&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=132872385320240&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=133365109612558&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=133728004526190&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=134254866602253&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://marc.info/?l=bugtraq&m=134254957702612&w=2(Issue Tracking, Mailing List, Third Party Advisory)
http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue(Third Party Advisory)
http://osvdb.org/74829(Broken Link)
http://rhn.redhat.com/errata/RHSA-2012-0508.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2013-1455.html(Broken Link)
http://secunia.com/advisories/45791(Not Applicable)
http://secunia.com/advisories/47998(Not Applicable)
http://secunia.com/advisories/48256(Not Applicable)
http://secunia.com/advisories/48692(Not Applicable)
http://secunia.com/advisories/48915(Not Applicable)
http://secunia.com/advisories/48948(Not Applicable)
http://secunia.com/advisories/49198(Not Applicable)
http://secunia.com/advisories/55322(Not Applicable)
http://secunia.com/advisories/55350(Not Applicable)

Last updated October 11, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain