CVE-2006-1117
Low
Description
nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.
SeverityLow
CVSS2.6
Exploit probability—
ProductNcipher Dse200 Document Sealing Engine
PublishedMar 9, 2006
First seenMar 9, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncipher dse200_document_sealing_engine | No range specified | — |
| ncipher ncore | No range specified | — |
| ncipher nforce | No range specified | — |
| ncipher securedb | No range specified | — |
| ncipher time_source_master_clock | No range specified | — |
| ncipher nethsm | 2.0, 2.1, 2.1.12_cam5 | — |
| ncipher nshield | No range specified | — |
| ncipher payshield | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.