CVE-2016-0887: dell bsafe_crypto-c-micro-edition
Vulnerability summary
CVE-2016-0887 is a medium (CVSS 5.9) vulnerability in dell bsafe_crypto-c-micro-edition. EPSS estimates a 3.54% chance of exploitation in the next 30 days, higher than 89.1% of scored vulnerabilities.
Timeline
- 12-04-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL-C before 2.8.9 allow remote attackers to discover a private-key prime by conducting a Lenstra side-channel attack that leverages an application's failure to detect an RSA signature failure during a TLS session.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.54%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.54% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell5 products
- bsafe_crypto-c-micro-edition≥ 4.0, ≤ 4.0.5.3 | ≥ 4.1, ≤ 4.1.2
- bsafe_crypto-j< 6.2.1
- bsafe_micro-edition-suite≥ 4.0.0, ≤ 4.0.11 | ≥ 4.1.0, < 4.1.5
- bsafe_ssl-c< 2.8.9
- bsafe_ssl-j< 6.2.1
1 vendor · 5 products
References
6 links- www.securityfocus.com/archive/1/538055/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/136656/RSA-BSAFE-Lenstras-Attack.htmlX Refsource MISCThird Party AdvisoryVDB Entry