Read the docs
TI-2019-02748 Aliases CVE-2019-3729GHSA-ff5p-8cgp-p5jc

Stack-based buffer overflow in Dell RSA BSAFE MES

Priority LOW 13CWE-121Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the library of the affected system.

Why it matters now

EPSS 0.00399 34th percentileScored 2026-11-07
Fix Fixed RSA BSAFE MES (Dell): 4.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellRSA BSAFE MESbefore 4.44.4Patch availableCNA
  • RSA BSAFE MES VendorDell Affected before 4.4 Fixed in 4.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*4.0.0 to before 4.0.13; 4.1.0 to before 4.4.0VulnerableDell
  • cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:* Versions 4.0.0 to before 4.0.13; 4.1.0 to before 4.4.0 Vulnerable ·Dell

Remediation

  • Fix · CNA RSA BSAFE MES (Dell) Fixed in 4.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell RSA BSAFE MES 4.4

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2019-02751 Observable discrepancy in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
    • TI-2019-02750 Cryptographic flaw in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
    • TI-2019-02749 Information disclosure through error messages in Dell RSA BSAFE MESPriority LOW 34
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3729
  2. 2026-10-03 Alias added: GHSA-ff5p-8cgp-p5jc

References

Advisory 1

  • TI-2020-17861 Improper signature verification in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17859 Information disclosure in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17855 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
  • TI-2020-17729 Improper input validation in Dell BSAFE Micro Edition Suite CVSS 3.1CRITICAL 9.8
  • TI-2020-17728 Improper input validation in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17727 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences