CVE-2016-2183

CVE-2016-2183, known as "Sweet32," is a vulnerability affecting the DES and Triple DES ciphers used in protocols like TLS, SSH, and IPSec, impacting products from vendors such as Cisco, Node.js, OpenSSL, Oracle, Python, and Red Hat. This high-severity vulnerability (CVSS 7.5) allows remote attackers to obtain cleartext data via a birthday attack against long-duration encrypted sessions due to the ciphers' birthday bound of approximately four billion blocks. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and concern.