Read the docs
TI-2023-12654 Aliases CVE-2023-28074GHSA-75g8-qq4f-vwx8

Out-of-bounds read in Dell BSAFE Micro Edition Suite

Priority LOW 30CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0015 4th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellDell BSAFE Micro Edition Suite5.0—No fix listedCNA
DellDell BSAFE Micro Edition Suite4.0 – 4.6.1—No fix listedCNA
DellDell BSAFE Crypto-C Micro Edition4.0 – 4.1.5—No fix listedCNA
  • Dell BSAFE Micro Edition Suite VendorDell Affected 5.0 Fixed in — No fix listed CNA
  • Dell BSAFE Micro Edition Suite VendorDell Affected 4.0 – 4.6.1 Fixed in — No fix listed CNA
  • Dell BSAFE Crypto-C Micro Edition VendorDell Affected 4.0 – 4.1.5 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*4.0.0 – 4.1.5VulnerableDell
cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*4.0.0 to before 4.6.2VulnerableDell
cpe:2.3:a:dell:bsafe_micro-edition-suite:5.0:*:*:*:*:*:*:*5.0VulnerableDell
  • cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.1.5 Vulnerable ·Dell
  • cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:* Versions 4.0.0 to before 4.6.2 Vulnerable ·Dell
  • cpe:2.3:a:dell:bsafe_micro-edition-suite:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Dell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-28074
  2. 2026-10-03 Alias added: GHSA-75g8-qq4f-vwx8

References

Advisory 1

  • TI-2020-17861 Improper signature verification in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17859 Information disclosure in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17855 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
  • TI-2020-17729 Improper input validation in Dell BSAFE Micro Edition Suite CVSS 3.1CRITICAL 9.8
  • TI-2020-17728 Improper input validation in Dell BSAFE Crypto-C Micro Edition CVSS 3.1CRITICAL 9.8
  • TI-2020-17727 Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition… CVSS 3.1CRITICAL 9.8
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences