CVE-2020-35165

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-208CWE-203

Affected software

VendorProductVersions
DellDell BSAFE Crypto-C Micro Edition>= N/A, < 4.1.5
DellDell BSAFE Micro Edition Suite>= N/A, < 4.6

References

Timeline

Published
May 22, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-351669.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimCVE-2020-351679.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimCVE-2020-351689.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimCVE-2020-351699.8Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper InpCVE-2020-35178.6A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attackCVE-2020-351705.4Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMaxCVE-2020-351739.8The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.CVE-2020-351755.3Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.CVE-2020-351765.3In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intenCVE-2020-351775.3HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.CVE-2020-35185.4A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remCVE-2020-351849.8The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deploy
CVE-2020-35165: Medium severity, CVSS 4.7 | Vulnix