CVE-2019-3728

HIGH

7.5

CVSS Score

Published: September 30, 2019 at 09:48 PM UTC

Updated: June 17, 2026 at 02:35 AM UTC

3 products affected across 1 vendorBSAFE Micro Edition SuiteBsafe Crypto C Micro EditionBsafe Crypto C

Using RSA BSAFE Crypto-C Micro Edition by Dell?

Get instant alerts when new vulnerabilities affect RSA BSAFE Crypto-C Micro Edition - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bsafe Crypto C · Dell

95%

6.0.0 ≤ v ≤ 6.46.0.0 ≤ v ≤ 6.4.*6.0.0

Bsafe Crypto C Micro Edition · Dell

95%

4.0.0 ≤ v < 4.0.5.44.0.0.0 ≤ v < 4.0.5.44.1.0 ≤ v < 4.1.44.0.0.0 4.1.0

Affected range stops below 4.0.5.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.4, so it looks safe — our inference, not a vendor statement

BSAFE Micro Edition Suite · Dell

95%

4.0.0 ≤ v < 4.0.134.1.0 ≤ v < 4.44.1.0 ≤ v < 4.4.04.0.0 4.1.0

Affected range stops below 4.0.13, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.dell.com/support/kbdoc/000194054

References (3)

Vendor Advisoryx_refsource_MISC

Source: [email protected]

https://www.dell.com/support/kbdoc/000194054

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2140

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2141

CVSS

7.5HIGHdell

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card