CVE-2015-0535

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state…

published August 20, 2015

CVSS
—
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01060 · 64.0th percentile
Published
2015-08-20T10:00Z
EPSS history
Timeline
  • 20 AUG 10:00Z
    EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state…
    cvelistv5