Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

DSA-2020-245: Dell BSAFE Micro Edition Suite Multiple Vulnerabilities

Summary: Dell BSAFE Micro Edition Suite (Micro Edition Suite) remediation is available for multiple vulnerabilities that may be exploited by malicious users to compromise the affected system.

This article applies to   This article does not apply to 

Impact

High

Details

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2020-26184 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain an Improper Certificate Validation vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2020-26185 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain a Buffer Over-Read Vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2020-26184 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain an Improper Certificate Validation vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2020-26185 Dell BSAFE Micro Edition Suite, versions before 4.5.1, contain a Buffer Over-Read Vulnerability. 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Affected Versions Updated Version Link to Update
Dell BSAFE Micro Edition Suite 4.0.x
4.1.x
4.2.x
4.3.x
4.4.x
4.5
 4.5.1 Support for BSAFE Micro Edition Suite | Overview | Dell US
Product Affected Versions Updated Version Link to Update
Dell BSAFE Micro Edition Suite 4.0.x
4.1.x
4.2.x
4.3.x
4.4.x
4.5
 4.5.1 Support for BSAFE Micro Edition Suite | Overview | Dell US

Workarounds & Mitigations

Workarounds or mitigation may exist based on individual use case and usage of the product. Only customers with active BSAFE maintenance contracts can receive details about the vulnerabilities, including possible workaround or mitigations.

Revision History

Revision

Date

Description

1.0

2020-12-09

Initial Release

2.02022-05-31Details Provided 

Related Information

Affected Products

BSAFE Micro Edition Suite, Product Security Information
Article Properties
Article Number: 000180487
Article Type: Dell Security Advisory
Last Modified: 09 Jun 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000180487
Article Type: Dell Security Advisory
Last Modified: 09 Jun 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.