CVE:CVE-2019-17007
CNNVD:CNNVD-201912-023
Network Security Services（NSS）是一套用于跨平台开发且启用了安全功能的客户端和服务器应用的库，用NSS编译的应用可支持SSLv2、SSLv3、TLS等安全标准。NSS是美国Mozilla基金会的一个底层密码学库。该库支持多种加密算法，并且 Firefox 浏览器的TLS实现基于该库。
Mozilla nss中存在信任管理问题漏洞。该漏洞源于网络系统或产品中缺乏有效的信任管理机制。攻击者可利用默认密码或者硬编码密码、硬编码证书等攻击受影响组件。
solution:Upgrade mozilla network_security_services to a higher version than 3.44,and avoid the version (,3.44); Upgrade siemens ruggedcom_rox_mx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1400_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1500_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1501_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1510_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1511_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx1512_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0); Upgrade siemens ruggedcom_rox_rx5000_firmware to a higher version than 2.14.0,and avoid the version (,2.14.0)