Observable Timing Discrepancy Vulnerability in Dell BSAFE Crypto-C Micro Edition and Suite
CVE-2020-35168

4.7MEDIUM

Key Information:

Vendor

Dell
Status
Dell Bsafe Crypto-c Micro Edition
Vendor
CVE Published:
11 July 2022

What is CVE-2020-35168?

The vulnerability present in Dell BSAFE Crypto-C Micro Edition and Micro Edition Suite relates to observable timing discrepancies that can be exploited by attackers. This flaw allows an adversary to gain insights into cryptographic operations, potentially compromising sensitive data. Users are urged to update their software to the latest versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

Dell BSAFE Crypto-C Micro Edition < 4.1.5, 4.6

References

https://www.dell.com/support/kbdoc/en-us/000181115/dsa-20...
x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.