High severity · published Sep 30, 2019
CVE-2019-3728
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0…
7.5
CVSS
2.4%
EPSS
No
On KEV
Description
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BC
Bsafe Crypto-c · Dell
6.0.0 through 6.4 · source: NVD
BC
Bsafe Crypto-c-micro-edition · Dell
4.0.0 before 4.0.5.4; 4.1.0 before 4.1.4 · source: NVD
BM
Bsafe Micro-edition-suite · Dell
4.0.0 before 4.0.13; 4.1.0 before 4.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3728
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3728
Vendor Advisory
https://www.dell.com/support/kbdoc/000194054
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2140
www.talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2141
More from Bsafe Crypto-c
9.8
CVE-2018-11058
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain…
9.8
CVE-2015-0537
Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition…
6.5
CVE-2018-11056
RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption…
–
CVE-2006-3894
The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of…