Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

19 records

Priority LOW 30

Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0015 Published 2024-07-31 No fix listed CWE-125
Priority LOW 22

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00152 Published 2024-05-22 Fixed in 4.1.5, 4.6 CWE-208
Priority MEDIUM 43

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Required Cryptographic Step Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2024-02-02 Fixed in 4.1.5, 4.5.2 CWE-295
Priority MEDIUM 44

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00996 Published 2022-07-11 Fixed in 4.1.5 and 4.6 CWE-347
Priority MEDIUM 44

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01021 Published 2022-07-11 Fixed in 4.1.5 or 4.1.4.1 CWE-200
Priority MEDIUM 44

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01174 Published 2022-07-11 Fixed in 4.1.5 / 4.6 CWE-331
Priority MEDIUM 44

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01098 Published 2022-07-11 Fixed in 4.1.5 and 4.6 CWE-20
Priority LOW 36

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to 4.1.6.1 (in 4.1.x) and v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01415 Published 2019-09-30 Fixed in 4.1.4, 4.4 CWE-385
Priority LOW 36

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01355 Published 2019-09-30 Fixed in 4.1.4, 4.4 CWE-310
Priority LOW 37

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02405 Published 2019-09-30 Fixed in 4.0.5.4, 4.1.4 +2 CWE-125
Priority LOW 33

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.03539 Published 2016-04-12 No fix listed CWE-200
Priority LOW 29

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, whic…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01632 Published 2013-10-11 No fix listed CWE-327