CVE-2019-3728 : Security Advisory and Response

CVE-2019-3728 was published on September 12, 2019, by Dell. It affects RSA BSAFE Crypto-C Micro Edition and RSA BSAFE MES.

Understanding CVE-2019-3728

This CVE involves a vulnerability in RSA BSAFE Crypto-C Micro Edition and RSA BSAFE MES that could be exploited by a remote attacker.

What is CVE-2019-3728?

Versions of RSA BSAFE Crypto-C Micro Edition and RSA BSAFE MES have a Buffer Over-read vulnerability during DSA signature processing, potentially leading to a system crash.

The Impact of CVE-2019-3728

The vulnerability has a CVSS base score of 7.5 (High) with a HIGH availability impact. It does not impact confidentiality or integrity but can cause a crash in the affected system's library.

Technical Details of CVE-2019-3728

Vulnerability Description

The vulnerability in RSA BSAFE Crypto-C Micro Edition and RSA BSAFE MES allows a remote attacker to exploit a Buffer Over-read issue during DSA signature processing.

Affected Systems and Versions

RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 and 4.1.4
RSA BSAFE MES versions prior to 4.4

Exploitation Mechanism

The vulnerability can be exploited remotely by a malicious user to trigger a crash in the system's library.

Mitigation and Prevention

Immediate Steps to Take

Apply patches provided by Dell to fix the vulnerability
Monitor Dell's security advisories for updates

Long-Term Security Practices

Regularly update software and firmware to the latest versions
Implement network segmentation and access controls

Patching and Updates

Ensure timely installation of security patches released by Dell to address the vulnerability.