CVE-2015-0535
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - security_alert@emc.com
- Published
- 2015-08-20
- Last modified
- 2024-08-06
- Weaknesses
- CWE-327
Affected products
- Bsafe (Dell)
- Bsafe Ssl-c (Dell)
References
- http://seclists.org/bugtraq/2015/Aug/84
- http://www.securityfocus.com/bid/76377
