Vulnerabilities > Dell > Bsafe Micro Edition Suite > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2016-04-12 CVE-2016-0887 Information Exposure vulnerability in Dell products
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session.
network
high complexity
dell CWE-200
2.6
2014-12-30 CVE-2014-4630 Cryptographic Issues vulnerability in Dell Bsafe Micro-Edition-Suite and Bsafe Ssl-J
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."
network
dell CWE-310
4.3
2014-04-11 CVE-2014-0636 Cryptographic Issues vulnerability in Dell Bsafe Micro-Edition-Suite
EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.
network
dell CWE-310
5.8
2014-03-25 CVE-2014-0628 Improper Input Validation vulnerability in Dell Bsafe Micro-Edition-Suite
The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
network
low complexity
dell CWE-20
5.0