PT-2022-7383 · Dell · Dell Bsafe Crypto-C Micro Edition+1

Published 2022-09-11 · Updated 2024-05-22 · CVE-2020-35165

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell BSAFE Crypto-C Micro Edition versions before 4.1.5 Dell BSAFE Micro Edition Suite versions before 4.6

Description The issue is related to an Observable Timing Discrepancy, which can be exploited to reveal protected information. This is due to the manipulation of an unknown input, leading to a timing discrepancy vulnerability.

Recommendations For Dell BSAFE Crypto-C Micro Edition versions before 4.1.5, update to version 4.1.5 or later. For Dell BSAFE Micro Edition Suite versions before 4.6, update to version 4.6 or later.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

CWE-208

Related Identifiers

BDU:2024-04646

CVE-2020-35165

Affected Products

Dell Bsafe Crypto-C Micro Edition

Dell Bsafe Micro Edition Suite

References · 6

• https://osv.dev/vulnerability/CVE-2020-35165 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35165 · Security Note
• https://bdu.fstec.ru/vul/2024-04646 · Security Note
• https://twitter.com/CVEnew/status/1793384257408086519 · Twitter Post
• https://t.me/cvenotify/80634 · Telegram Post