CVE-2015-0535: High severity rsa bsafe vulnerability
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0535?
CVE-2015-0535 has a medium severity rating due to its potential for cipher-downgrade attacks.
How do I fix CVE-2015-0535?
To fix CVE-2015-0535, upgrade to EMC RSA BSAFE Micro Edition Suite version 4.0.8 or 4.1.3 or later, and also update the RSA BSAFE SSL-C to version 2.8.10 or above.
What vulnerabilities are associated with CVE-2015-0535?
CVE-2015-0535 is associated with the improper restriction of TLS state transitions that allow for potential cipher-downgrade attacks.
Which products are affected by CVE-2015-0535?
CVE-2015-0535 affects EMC RSA BSAFE Micro Edition Suite versions prior to 4.0.8 and 4.1.3, as well as RSA BSAFE SSL-C version 2.8.9 and earlier.
How can attackers exploit CVE-2015-0535?
Attackers can exploit CVE-2015-0535 by sending crafted TLS traffic that manipulates cipher negotiations to weaken encryption.