Vulnerability in Dell Bsafe Crypto-C-Micro-Edition
CVE-2019-3732
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to 4.1.6.1 (in 4.1.x) and versions prior to 4.3.3 (4.2.x and 4.3.x) are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.
EPSS: 0.014 (70.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Dell Bsafe_crypto-c-micro-edition
- Dell Bsafe_micro-edition-suite
- Dell Rsa Bsafe Crypto-c Micro Edition — versions unspecified
- Dell Rsa Bsafe Mes — versions unspecified
- Emc Rsa_bsafe_crypto-c
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-3732?
- CVE-2019-3732 is a high-severity vulnerability in Dell Bsafe Crypto-C-Micro-Edition, classified under CWE-385. CVSS score: 7.5/10. Published 2019-09-30.
- How severe is CVE-2019-3732?
- High severity. CVSS v3 base score is 7.5 out of 10.