Vulnerability in Ncipher Dse200 Document Sealing Engine
CVE-2006-1117
nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.
EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.
Affected products
- Ncipher Dse200_document_sealing_engine
- Ncipher Ncore
- Ncipher Nethsm — versions 2.0, 2.1, 2.1.12_cam5
- Ncipher Nforce
- Ncipher Nshield
- Ncipher Payshield
- Ncipher Securedb
- Ncipher Time_source_master_clock
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)