Lucene search

K
cve[email protected]CVE-2020-35165
HistoryMay 22, 2024 - 6:15 a.m.

CVE-2020-35165

2024-05-2206:15:09
CWE-208
web.nvd.nist.gov
32
dell
bsafe
crypto-c
micro edition
suite
timing discrepancy
vulnerability

5.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell BSAFE Crypto-C Micro Edition",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "4.1.5",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Dell BSAFE Micro Edition Suite",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "4.6",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

5.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2020-35165