CVE-2020-29505

Published: Jul 11, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key Management Error Vulnerability.

Affected (4)

Products: Dell: Bsafe Crypto C Micro Edition, Bsafe Micro Edition Suite · Oracle: Retail Customer Insights

Dell

2 products

Bsafe Crypto C Micro Edition

Bsafe Micro Edition Suite

Oracle

1 product

Retail Customer Insights

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dell Bsafe Crypto C Micro Edition	Before 4.1.5
Dell Bsafe Micro Edition Suite	Before 4.5.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Retail Customer Insights	Version 15.0.2
Oracle Retail Customer Insights	Version 16.0.2

Related CWEs

CWE-331

Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (4)

https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: security_alert@emc.com

PatchThird Party Advisory

https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.