CVE-2017-15361

CVE-2017-15361, known as ROCA, is a critical vulnerability in Infineon RSA library firmware that allows attackers to derive private RSA keys due to flawed key generation. This impacts numerous products from vendors like Dell, HP, Lenovo, and Google, affecting technologies such as BitLocker and YubiKey. Rated as Medium severity (CVSS 5.9), it has a high potential for compromise of confidentiality, though it requires high attack complexity. While there are no known public exploits or active exploitation, the vulnerability has garnered significant community discussion and media coverage, indicating its importance and the potential for future exploitation.