TI-2019-02752 Aliases CVE-2019-3733 GHSA-mg7p-v7g7-h925

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3)…

LOW 23CWE-316Published 2019-09-30 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.

Why it matters now

EPSS 0.006 48th percentileScored 2026-11-07

Fix Fixed RSA BSAFE Crypto-C Micro Edition (Dell): 4.1.4RSA BSAFE MES (Dell): 4.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	RSA BSAFE Crypto-C Micro Edition	before 4.1.4	4.1.4	Patch available	CNA
Dell	RSA BSAFE MES	before 4.4	4.4	Patch available	CNA

RSA BSAFE Crypto-C Micro Edition VendorDell Affected before 4.1.4 Fixed in 4.1.4 Patch available CNA
RSA BSAFE MES VendorDell Affected before 4.4 Fixed in 4.4 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:bsafe_crypto-c-micro-edition::::::::	4.1 to before 4.1.4	Vulnerable	Dell
cpe:2.3:a:emc:rsa_bsafe_crypto-c::::::::	4.0 – 4.0.5.3	Vulnerable	EMC

cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:* Versions 4.1 to before 4.1.4 Vulnerable ·Dell
cpe:2.3:a:emc:rsa_bsafe_crypto-c:*:*:*:*:*:*:*:* Versions 4.0 – 4.0.5.3 Vulnerable ·EMC

Remediation

Fix · CNA RSA BSAFE Crypto-C Micro Edition (Dell) Fixed in 4.1.4
Fix · CNA RSA BSAFE MES (Dell) Fixed in 4.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2019-09-30
Dell RSA BSAFE MES 4.4
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2019-02751 Observable discrepancy in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
- TI-2019-02750 Cryptographic flaw in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
- TI-2019-02749 Information disclosure through error messages in Dell RSA BSAFE MESPriority LOW 34
Show all 5 records →
Release · 2019-09-30
Dell RSA BSAFE Crypto-C Micro Edition 4.1.4
3 records Highest priority Priority LOW 3 LOW
Other records, highest priority first
- TI-2019-02751 Observable discrepancy in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
- TI-2019-02750 Cryptographic flaw in Dell RSA BSAFE Crypto-C Micro EditionPriority LOW 36
Show all 3 records →

Timeline

2026-10-02 Threatist record created from CVE-2019-3733
2026-10-03 Alias added: GHSA-mg7p-v7g7-h925

References

Advisory 1

https://www.dell.com/support/kbdoc/000194054

TI-2020-17861 Improper signature verification in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
TI-2020-17859 Information disclosure in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
TI-2020-17855 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
TI-2020-17729 Improper input validation in Dell BSAFE Micro Edition Suite CVSS 3.1CRITICAL 9.8
TI-2020-17728 Improper input validation in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
TI-2020-17727 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8

See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences