CVE-2020-29505 — Insufficient Entropy in Dell Bsafe Crypto-c Micro Edition

CWE-331 — Insufficient Entropy3 documents3 sources
Severity
7.5HIGHNVD
CNA7.1
EPSS
0.5%
top 34.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Dell Bsafe Crypto-c Micro EditionDell Bsafe Crypto-c-micro-editionDell Bsafe Micro-edition-suite+1 more
Timeline
PublishedJul 11
Latest updateJul 12

Description

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key Management Error Vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5dell/dell_bsafe_crypto-c_micro_editionunspecified — 4.1.5 and 4.6
▶NVDoracle/retail_customer_insights15.0.2, 16.0.2+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9qm9-mgq3-x66p: Dell BSAFE Crypto-C Micro Edition, versions before 4↗2022-07-12
▶
CVEList
CVE-2020-29505: Dell BSAFE Crypto-C Micro Edition, versions before 4↗2022-07-11
▶
CVE-2020-29505 — Insufficient Entropy in Dell | cvebase