Vulnerabilities > CVE-2020-35166

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

dell

oracle

critical

NVD

Published: 2022-07-11

Updated: 2024-09-17

Summary

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Dell Dell Bsafe Crypto C Micro Edition 3.0.0.0 Dell Bsafe Crypto C Micro Edition 3.0.0.1 Dell Bsafe Crypto C Micro Edition 3.0.0.14 Dell Bsafe Crypto C Micro Edition 3.0.0.15 Dell Bsafe Crypto C Micro Edition 3.0.0.16 Dell Bsafe Crypto C Micro Edition 3.0.0.19 Dell Bsafe Crypto C Micro Edition 3.0.0.20 Dell Bsafe Crypto C Micro Edition 4.0 Dell Bsafe Crypto C Micro Edition 4.0.0 Dell Bsafe Crypto C Micro Edition 4.0.1 Dell Bsafe Crypto C Micro Edition 4.0.2 Dell Bsafe Crypto C Micro Edition 4.0.3 Dell Bsafe Crypto C Micro Edition 4.0.4 Dell Bsafe Crypto C Micro Edition 4.0.5 Dell Bsafe Crypto C Micro Edition 4.0.5.2 Dell Bsafe Crypto C Micro Edition 4.0.5.3 Dell Bsafe Crypto C Micro Edition 4.0.5.4 Dell Bsafe Crypto C Micro Edition 4.1 Dell Bsafe Crypto C Micro Edition 4.1.0 Dell Bsafe Crypto C Micro Edition 4.1.1 Dell Bsafe Crypto C Micro Edition 4.1.2 Dell Bsafe Crypto C Micro Edition 4.1.3 Dell Bsafe Crypto C Micro Edition 4.1.3.1 Dell Bsafe Crypto C Micro Edition 4.1.3.2 Dell Bsafe Crypto C Micro Edition 4.1.3.3 Dell Bsafe Crypto C Micro Edition 4.1.4 Dell Bsafe Micro Edition Suite 3.1 Dell Bsafe Micro Edition Suite 3.2.0 Dell Bsafe Micro Edition Suite 3.2.1 Dell Bsafe Micro Edition Suite 3.2.2 Dell Bsafe Micro Edition Suite 3.2.3 Dell Bsafe Micro Edition Suite 3.2.4 Dell Bsafe Micro Edition Suite 3.2.5 Dell Bsafe Micro Edition Suite 3.2.6 Dell Bsafe Micro Edition Suite 4.0.0 Dell Bsafe Micro Edition Suite 4.0.1 Dell Bsafe Micro Edition Suite 4.0.2 Dell Bsafe Micro Edition Suite 4.0.3 Dell Bsafe Micro Edition Suite 4.0.4 Dell Bsafe Micro Edition Suite 4.0.5 Dell Bsafe Micro Edition Suite 4.0.5.3 Dell Bsafe Micro Edition Suite 4.0.6 Dell Bsafe Micro Edition Suite 4.0.7 Dell Bsafe Micro Edition Suite 4.0.8 Dell Bsafe Micro Edition Suite 4.0.9 Dell Bsafe Micro Edition Suite 4.0.10 Dell Bsafe Micro Edition Suite 4.0.11 Dell Bsafe Micro Edition Suite 4.0.12 Dell Bsafe Micro Edition Suite 4.0.13 Dell Bsafe Micro Edition Suite 4.1.0 Dell Bsafe Micro Edition Suite 4.1.0.1 Dell Bsafe Micro Edition Suite 4.1.1 Dell Bsafe Micro Edition Suite 4.1.2 Dell Bsafe Micro Edition Suite 4.1.3 Dell Bsafe Micro Edition Suite 4.1.4 Dell Bsafe Micro Edition Suite 4.1.5 Dell Bsafe Micro Edition Suite 4.1.6 Dell Bsafe Micro Edition Suite 4.1.6.1 Dell Bsafe Micro Edition Suite 4.1.6.2 Dell Bsafe Micro Edition Suite 4.1.6.3 Dell Bsafe Micro Edition Suite 4.2.0 Dell Bsafe Micro Edition Suite 4.3 Dell Bsafe Micro Edition Suite 4.3.1 Dell Bsafe Micro Edition Suite 4.3.2 Dell Bsafe Micro Edition Suite 4.3.3 Dell Bsafe Micro Edition Suite 4.4 Dell Bsafe Micro Edition Suite 4.4.0 Dell Bsafe Micro Edition Suite 4.5 Dell Bsafe Micro Edition Suite 4.5.1 Dell Bsafe Micro Edition Suite 4.5.2	70
Application	Oracle Oracle Http Server 12.2.1.3.0 Oracle Http Server 12.2.1.4.0 Oracle Security Service 12.2.1.3.0 Oracle Security Service 12.2.1.4.0 Oracle Database 12.1.0.2 Oracle Database 19C Oracle Database 21C Oracle Weblogic Server Proxy Plug IN 12.2.1.3.0 Oracle Weblogic Server Proxy Plug IN 12.2.1.4.0	9

References

https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities

Vulnerabilities > CVE-2020-35166 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-35166"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-35166