PatchTheCVEncipher vulnerabilities
Recent CVEs affecting ncipher products. 10 tracked.
ncipher has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-03-09. Highest priority: CVE-2004-0063 (score 44/100).
- CVE-2006-1117 LOW 2.6 MITIGATE MITIGATE nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6)
- CVE-2006-1116 MEDIUM 5.0 DOWNGRADE The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as
- CVE-2006-1115 LOW 2.6 MITIGATE DOWNGRADE nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified Disc
- CVE-2004-0320 LOW 2.1 MITIGATE Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to a
- CVE-2004-0063 HIGH 7.5 DOWNGRADE The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK valu
- CVE-2003-1417 MEDIUM 4.4 DOWNGRADE nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary co
- CVE-2002-1446 MEDIUM 5.0 DOWNGRADE The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 l
- CVE-2002-0941 MEDIUM 4.6 MITIGATE MITIGATE The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and
- CVE-2002-0940 MEDIUM 4.6 DOWNGRADE domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when th
- CVE-2002-0939 MEDIUM 4.6 DOWNGRADE The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user req
FAQ
How do I fix ncipher vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ncipher being exploited right now?
None of the tracked ncipher CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ncipher CVE should I patch first?
CVE-2004-0063 currently ranks highest (44/100): The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK valu.