CVE-2016-0887
Published Apr 12, 2016
Last updated 3 years ago
Overview
- Description
- EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session.
- Source
- security_alert@emc.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 5.9
- Impact score
- 3.6
- Exploitability score
- 2.2
- Vector string
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 2.6
- Impact score
- 2.9
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "673ED099-C778-4E51-89C4-369490646348", "versionEndIncluding": "4.0.5.3", "versionStartIncluding": "4.0" }, { "criteria": "cpe:2.3:a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42D145F5-46EA-4198-BD59-BB296461324E", "versionEndIncluding": "4.1.2", "versionStartIncluding": "4.1" }, { "criteria": "cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44D1B34C-998E-46E6-B7CF-EE28C8E5FBC8", "versionEndExcluding": "6.2.1" }, { "criteria": "cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5456BD00-766C-4868-9BA5-C8E82B353808", "versionEndIncluding": "4.0.11", "versionStartIncluding": "4.0.0" }, { "criteria": "cpe:2.3:a:dell:bsafe_micro-edition-suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "261B4766-7CD0-47F8-997E-706129AA0A5E", "versionEndExcluding": "4.1.5", "versionStartIncluding": "4.1.0" }, { "criteria": "cpe:2.3:a:dell:bsafe_ssl-c:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03175755-5E21-4B3A-A329-9F1804CF98CF", "versionEndExcluding": "2.8.9" }, { "criteria": "cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36CE780D-E392-4543-A531-F6740823C53D", "versionEndExcluding": "6.2.1" } ], "operator": "OR" } ] } ]