CVE-2020-35166

CWE-3853 documents3 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 34.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Dell Bsafe Crypto-c Micro EditionDell Dell Bsafe Micro Edition SuiteDell Bsafe Crypto-c-micro-edition+5 more
Timeline
PublishedJul 11
Latest updateJul 12

Description

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.4 | Impact: 3.6

Affected Packages8 packages

▶NVDoracle/database12.1.0.2, 19c, 21c+2

🔴Vulnerability Details

2
GHSA
GHSA-4jqg-rxh9-h7mc: Dell BSAFE Crypto-C Micro Edition, versions before 4↗2022-07-12
▶
CVEList
CVE-2020-35166: Dell BSAFE Crypto-C Micro Edition, versions before 4↗2022-07-11
▶