> Source: [sk121995](https://support.checkpoint.com/results/sk/sk121995)

# sk121995 - Check Point response to ROBOT attack

| Property | Value |
|----------|-------|
| Solution ID | sk121995 |
| Date Created | 2017-12-18 |
| Last Modified | 2017-12-18 |
| Technical Level | General |

## Symptoms

- * ROBOT is the return of a 19-year-old vulnerability that allows performing RSA decryption and signing operations with the private key of a TLS server.
* By using some slight variations this vulnerability can still be used against many HTTPS hosts in today's Internet.

## Cause

The vulnerability requires an incorrect implementation of TLS RFC. The issue happens only if a server receives an incorrectly formatted pre-master-secret from a client, and fails the connection immediately. This gives the client an ability to deduce info about the encrypted data. Check Point implementation is according to the RFC which does not leak information to the client.

## Solution

Check Point products are **not**vulnerable to ROBOT attack.

For reference and more information about ROBOT attack see <https://robotattack.org/>.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content