Dell Bsafe vulnerabilities

12 CVEs affecting Dell Bsafe, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15769, published 2018-11-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11058, published 2018-09-14. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read…
CVE-2018-11054, published 2018-08-31. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
CVE-2018-15769, published 2018-11-16. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially…
CVE-2015-0537, published 2015-08-20. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before…
CVE-2015-0536, published 2015-08-20. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are…
CVE-2018-11056, published 2018-08-31. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource…
CVE-2018-11057, published 2018-08-31. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher…
CVE-2016-0923, published 2016-09-18. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes…
CVE-2015-0534, published 2015-08-20. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce…
CVE-2015-0535, published 2015-08-20. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for…

Latest

CVE-2018-11055, published 2018-08-31. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability.…