Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000180487


DSA-2020-245: Dell BSAFE Micro Edition Suite Multiple Vulnerabilities

Summary: Dell BSAFE Micro Edition Suite (Micro Edition Suite) remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.

Article Content


Impact

High

Details

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2020-26184 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain an Improper Certificate Validation vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2020-26185 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain a Buffer Over-Read Vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2020-26184 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain an Improper Certificate Validation vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2020-26185 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain a Buffer Over-Read Vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions Updated Version Link to Update
Dell BSAFE Micro Edition Suite 4.0.x
4.1.x
4.2.x
4.3.x
4.4.x
4.5
 4.5.1 Support for BSAFE Micro Edition Suite | Overview | Dell US
Product Affected Versions Updated Version Link to Update
Dell BSAFE Micro Edition Suite 4.0.x
4.1.x
4.2.x
4.3.x
4.4.x
4.5
 4.5.1 Support for BSAFE Micro Edition Suite | Overview | Dell US

Workarounds and Mitigations

Workarounds or mitigation may exist based on individual use case and usage of the product. Only customers with active BSAFE maintenance contracts can receive details about the vulnerabilities, including possible workaround or mitigations.

Revision History

Revision

Date

Description

1.0

2020-12-09

Initial Release

2.02022-05-31Details Provided 

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide


Article Properties


Affected Product

BSAFE Micro Edition Suite, Product Security Information

Last Published Date

09 Jun 2022

Version

12

Article Type

Dell Security Advisory