Vulnerability in Dell Bsafe Crypto-C-Micro-Edition
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.016 (75.0th percentile) — read the EPSS interpretation.
Affected products
- Dell Bsafe_crypto-c-micro-edition
- Dell Bsafe_crypto-j — versions 5.0, 5.0.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (x_refsource_MISC, Not Applicable)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2007-6755?
- CVE-2007-6755 is a vulnerability in Dell Bsafe Crypto-C-Micro-Edition, classified under Use of a Broken or Risky Cryptographic Algorithm. Published 2013-10-11.
- Is CVE-2007-6755 known to be exploited?
- 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.