Read the docs
TI-2019-02750 Aliases CVE-2019-3731GHSA-3543-6fm3-c53p

Cryptographic flaw in Dell RSA BSAFE Crypto-C Micro Edition

Priority LOW 36CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-203.

Summary

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.

Why it matters now

EPSS 0.01355 71st percentileScored 2026-11-07
Fix Fixed RSA BSAFE Crypto-C Micro Edition (Dell): 4.1.4RSA BSAFE MES (Dell): 4.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellRSA BSAFE Crypto-C Micro Editionbefore 4.1.44.1.4Patch availableCNA
DellRSA BSAFE MESbefore 4.44.4Patch availableCNA
  • RSA BSAFE Crypto-C Micro Edition VendorDell Affected before 4.1.4 Fixed in 4.1.4 Patch available CNA
  • RSA BSAFE MES VendorDell Affected before 4.4 Fixed in 4.4 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*before 4.1.4VulnerableDell
cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*4.0.0 to before 4.0.13; 4.1.0 to before 4.4.0VulnerableDell
  • cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:* Versions before 4.1.4 Vulnerable ·Dell
  • cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:* Versions 4.0.0 to before 4.0.13; 4.1.0 to before 4.4.0 Vulnerable ·Dell

Remediation

  • Fix · CNA RSA BSAFE Crypto-C Micro Edition (Dell) Fixed in 4.1.4
  • Fix · CNA RSA BSAFE MES (Dell) Fixed in 4.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell RSA BSAFE MES 4.4

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2019-02751 Observable discrepancy in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
    • TI-2019-02749 Information disclosure through error messages in Dell RSA BSAFE MESPriority LOW 34
    • TI-2019-02752 RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3)…Priority LOW 23
    Show all 5 records →
  • Release ·

    Dell RSA BSAFE Crypto-C Micro Edition 4.1.4

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02751 Observable discrepancy in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
    • TI-2019-02752 RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3)…Priority LOW 23
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3731
  2. 2026-10-03 Alias added: GHSA-3543-6fm3-c53p

References

Advisory 1

  • TI-2020-17861 Improper signature verification in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17859 Information disclosure in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17855 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
  • TI-2020-17729 Improper input validation in Dell BSAFE Micro Edition Suite CVSS 3.1CRITICAL 9.8
  • TI-2020-17728 Improper input validation in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17727 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences