Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2020-29508: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

CVE-2020-29508 · published 4 years ago

Summary

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

What to do

Update dell bsafe_crypto-c-micro-edition to version 4.1.5 or later.
Update dell bsafe_micro-edition-suite to version 4.6 or later.

Affected software

Vendor	Product	Affected versions
dell	bsafe_crypto-c-micro-edition	< 4.1.5 `cpe:2.3:a:dell:bsafe_crypto-c-micro-edition::::::::`
dell	bsafe_micro-edition-suite	< 4.6 `cpe:2.3:a:dell:bsafe_micro-edition-suite::::::::`
oracle	database	12.1.0.2 19c 21c `cpe:2.3:a:oracle:database:12.1.0.2::::enterprise:::`
oracle	http_server	12.2.1.3.0 12.2.1.4.0 `cpe:2.3:a:oracle:http_server:12.2.1.3.0:::::::*`
oracle	security_service	12.2.1.3.0 12.2.1.4.0 `cpe:2.3:a:oracle:security_service:12.2.1.3.0:::::::*`
oracle	weblogic_server_proxy_plug-in	12.2.1.3.0 12.2.1.4.0 `cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.3.0:::::::*`

Original advisory text

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

References

https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypt... Vendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.html Patch Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

1% chance of attack within 30 days

Type

CWE-331Insufficient Entropy

CWE-20Improper Input Validation

Timeline

Published11 Jul 2022

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2020-29508 · NVD

Track software like this

Free during beta