Observable Timing Discrepancy in Dell BSAFE Crypto-C Micro Edition

CVE-2020-35164

Summary

Dell BSAFE Crypto-C Micro Edition versions prior to 4.1.5 and BSAFE Micro Edition Suite versions prior to 4.6 contain a vulnerability that manifests as an observable timing discrepancy. This flaw can potentially be exploited by attackers to gain insights into sensitive information or cryptographic operations, thereby compromising the security integrity of the affected systems. It is vital for organizations using these products to update to the patched versions to mitigate any security risks.

References