CVE-2006-1117: Ncipher DSE200 Document Sealing Engine

Low severity, CVSS 2.6. EPSS: 0.9% chance of exploitation in the next 30 days.

nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.

Affected products

• Ncipher DSE200 Document Sealing Engine: any version
• Ncipher Ncore: any version
• Ncipher Nethsm: version 2.0 only; version 2.1 only; version 2.1.12_cam5 only
• Ncipher Nforce: any version
• Ncipher Nshield: any version
• Ncipher Payshield: any version
• Ncipher Securedb: any version
• Ncipher Time Source Master Clock: any version

Published 2006-03-09. Last modified 2026-06-16.