Analysis Summary

CVE-2020-35165

Dell BSAFE Crypto-C Micro Edition could allow a local attacker to obtain sensitive information, caused by an observable timing discrepancy vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2020-35165

Affected Vendors

Remediation

Refer to Dell Security Advisory for patch, upgrade or suggested workaround information.

Dell Security Advisory