CVE-2015-0535

Published: Aug 20, 2015Modified: May 6, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.

Affected (3)

Products: Dell: Bsafe, Bsafe Ssl C

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dell Bsafe	From 4.0.0 to 4.0.8
Dell Bsafe	From 4.1.0 to 4.1.3
Dell Bsafe Ssl C	Up to 2.8.9

Related CWEs

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (4)

http://seclists.org/bugtraq/2015/Aug/84

Source: security_alert@emc.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/76377

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://seclists.org/bugtraq/2015/Aug/84

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/76377

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.