Observable Timing Discrepancy Vulnerability Affects Dell's BSAFE Crypto-C Micro Edition

CVE-2020-35165

Summary

The vulnerability present in Dell BSAFE Crypto-C Micro Edition and BSAFE Micro Edition Suite manifests as an observable timing discrepancy, which can allow an attacker to infer sensitive information based on the timing variations in cryptographic operations. This flaw may lead to the exposure of cryptographic keys or other critical data, thereby compromising sensitive data integrity and confidentiality. Users are urged to update to the latest versions to mitigate potential security risks associated with this vulnerability.

References