CVE-2016-0923: Dell Bsafe

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging server behavior in which the first algorithm is used.

Affected products

• Dell Bsafe: from 4.0.0, before 4.0.9 (fixed in 4.0.9); from 4.1.0, before 4.1.5 (fixed in 4.1.5)

Published 2016-09-18. Last modified 2026-06-17.