CVE:CVE-2019-17006
CNNVD:CNNVD-201912-1134
NSS是美国Mozilla基金会的一个底层密码学库。该库支持多种加密算法，并且 Firefox 浏览器的TLS实现基于该库。
Mozilla NSS 3.46之前版本中存在数据伪造问题漏洞，该漏洞源于网络系统或产品未充分验证数据的来源或真实性。攻击者可利用伪造的数据进行攻击。
solution:Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade mozilla network_security_services to a higher version than 3.46,and avoid the version (,3.46); Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -