Vulnerability in Dell Bsafe_crypto-c-micro-edition
CVE-2007-6755
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow conte…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.
Affected products
- Dell Bsafe_crypto-c-micro-edition
- Dell Bsafe_crypto-j — versions 5.0, 5.0.1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (x_refsource_MISC, Not Applicable)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
- secalert_us@oracle.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2007-6755?
- CVE-2007-6755 is a vulnerability in Dell Bsafe_crypto-c-micro-edition, classified under Use of a Broken or Risky Cryptographic Algorithm. Published 2013-10-11.
- Is CVE-2007-6755 known to be exploited?
- 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.