CVE-2007-6755: dell bsafe_crypto-c-micro-edition
Vulnerability summary
CVE-2007-6755 is a medium (CVSS 5.8) vulnerability in dell bsafe_crypto-c-micro-edition. EPSS estimates a 1.63% chance of exploitation in the next 30 days, higher than 75.8% of scored vulnerabilities.
Timeline
- 11-10-2013PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.63%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell2 products
- bsafe_crypto-c-micro-edition≥ 3.0.0.0, ≤ 3.0.0.20
- bsafe_crypto-j5.0 | 5.0.1
Debian1 product
- openssl< 1.1.0b-2
2 vendors · 3 products
References
9 links- blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.htmlX Refsource MISCThird Party Advisory
- blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.htmlX Refsource MISCThird Party Advisory
- threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspectX Refsource MISCThird Party Advisory
- arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/X Refsource MISCThird Party Advisory
