PT-2025-6425 · Dell · Bsafe Ssl-J

Published 2024-07-02 · Updated 2025-02-13 · CVE-2024-29171

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell BSAFE SSL-J versions prior to 6.6 Dell BSAFE SSL-J versions 7.0 through 7.2

Description The issue is related to an improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure.

Recommendations For versions prior to 6.6, update to version 6.6 or later. For versions 7.0 through 7.2, update to version 7.3 or later. As a temporary workaround, consider restricting the use of certificate verification functions until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-01833

CVE-2024-29171

Affected Products

Bsafe Ssl-J

References · 8

• https://bdu.fstec.ru/vul/2025-01833 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-29171 · Security Note
• https://dell.com/support/kbdoc/en-us/000226620/dsa-2024-221-security-update-for-dell-bsafe-ssl-j-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29171 · Vendor Advisory
• https://t.me/cvenotify/111159 · Telegram Post
• https://twitter.com/CVEnew/status/1889498757890515407 · Twitter Post
• https://t.me/cvenotify/110985 · Telegram Post
• https://t.me/cvedetector/17793 · Telegram Post