Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-0887

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session.

Published

2016-04-12T23:59:31.413

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

4.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell bsafe_crypto-c-micro-edition ≤ 4.0.5.3 Yes
Application dell bsafe_crypto-c-micro-edition ≤ 4.1.2 Yes
Application dell bsafe_crypto-j < 6.2.1 Yes
Application dell bsafe_micro-edition-suite ≤ 4.0.11 Yes
Application dell bsafe_micro-edition-suite < 4.1.5 Yes
Application dell bsafe_ssl-c < 2.8.9 Yes
Application dell bsafe_ssl-j < 6.2.1 Yes
References