{"uuid": "f5d3a22d-3bd2-423e-8c54-114fdc46434d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0224", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Masashi Kikuchi\", \"Craig Young \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module checks for the OpenSSL ChangeCipherSpec (CCS)\\n        Injection vulnerability. The problem exists in the handling of early\\n        CCS messages during session negotiation. Vulnerable installations of OpenSSL accepts\\n        them, while later implementations do not. If successful, an attacker can leverage this\\n        vulnerability to perform a man-in-the-middle (MITM) attack by downgrading the cipher spec\\n        between a client and server. This issue was first reported in early June, 2014.\", \"disclosure_date\": \"2014-06-05\", \"fullname\": \"auxiliary/scanner/ssl/openssl_ccs\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"OpenSSL Server-Side ChangeCipherSpec Injection Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/ssl/openssl_ccs.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ssl/openssl_ccs\", \"references\": [\"CVE-2014-0224\", \"URL-http://ccsinjection.lepidum.co.jp/\", \"URL-http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.html\", \"URL-http://www.tripwire.com/state-of-security/incident-detection/detection-script-for-cve-2014-0224-openssl-cipher-change-spec-injection/\", \"URL-https://www.imperialviolet.org/2014/06/05/earlyccs.html\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:09.634264Z"}