Dell Bsafe Crypto-C vulnerabilities

5 CVEs affecting Dell Bsafe Crypto-C, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3728, published 2019-09-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-3894, published 2007-05-22. Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days. The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed…
CVE-2018-11058, published 2018-09-14. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read…
CVE-2015-0537, published 2015-08-20. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before…
CVE-2019-3728, published 2019-09-30. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA…
CVE-2018-11056, published 2018-08-31. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource…