Dell Bsafe Crypto-C-Micro-Edition vulnerabilities

19 CVEs affecting Dell Bsafe Crypto-C-Micro-Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28074, published 2024-07-31.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0887, published 2016-04-12. Medium severity, CVSS 5.9. EPSS: 3.5% chance of exploitation in the next 30 days. EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before…
• CVE-2019-3728, published 2019-09-30. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA…
• CVE-2007-6755, published 2013-10-11. Medium severity, CVSS 5.8. EPSS: 1.6% chance of exploitation in the next 30 days. The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain…
• CVE-2019-3732, published 2019-09-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to…
• CVE-2019-3731, published 2019-09-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote…
• CVE-2020-29508, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.
• CVE-2020-29506, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-29507, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.
• CVE-2020-35163, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.
• CVE-2020-35167, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

Latest

• CVE-2023-28074, published 2024-07-31. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated…
• CVE-2020-35165, published 2024-05-22. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-29504, published 2024-02-02. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing Required Cryptographic Step Vulnerability.
• CVE-2020-35169, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
• CVE-2020-35168, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35166, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35164, published 2022-07-11. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.