CVE-2014-0160

OpenSSL's mishandling of Heartbeat Extension packets allowed remote attackers to extract sensitive data from TLS/DTLS connections.

This vulnerability exposed sensitive information transmitted over encrypted channels, directly impacting CMMC/NIST 800-171 requirements for protecting confidentiality and integrity. DIB organizations must ensure OpenSSL is patched to prevent data exfiltration and maintain compliance with security controls.

Shame score — A known, actively exploited vulnerability in a foundational cryptographic library that allowed remote attackers to bypass encryption and steal data, demonstrating severe negligence in patch management and supply chain security.