Vulnerability in Dell Bsafe Crypto-C-Micro-Edition
CVE-2019-3732
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to 4.1.6.1 (in 4.1.x) and versions prior to 4.3.3 (4.2.x and 4.3.x) are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.014 (72.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 72nd percentile — 72.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000
Affected products
- Dell Bsafe Crypto-C-Micro-Edition
- Dell Bsafe Micro-Edition-Suite
- Dell Rsa Bsafe Crypto-C Micro Edition — versions unspecified
- Dell Rsa Bsafe Mes — versions unspecified
- EMC Rsa Bsafe Crypto-C
Weakness classification (CWE)
References
- www.dell.com/support/kbdoc/000194054 (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-3732?
- CVE-2019-3732 is a high-severity vulnerability in Dell Bsafe Crypto-C-Micro-Edition, classified under CWE-385. CVSS score: 7.5/10. Published 2019-09-30.
- How severe is CVE-2019-3732?
- High severity. CVSS v3 base score is 7.5 out of 10.