CVE-2006-1115: Ncipher Chil

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack.

Affected products

• Ncipher Chil: any version
• Ncipher Mscapi Csp: version 5.50 only; version 5.54 only
• Ncipher Ncipher Software Cd: any version

Published 2006-03-09. Last modified 2026-06-16.