CVE-2015-0536: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9...

Security readout for executives and security teams

This flaw can let a remote attacker crash software using certain RSA BSAFE TLS libraries. The business impact is service disruption, not confirmed data theft. Exposure depends on a specific configuration: client authentication and ephemeral Diffie-Hellman ciphersuites enabled in affected BSAFE MES or SSL-C versions. Most exposure is indirect through products embedding RSA BSAFE MES or SSL-C. Internet-facing TLS services are relevant only if they use affected library versions and enable both client authentication and ephemeral Diffie-Hellman ciphersuites. Treat this as a targeted availability risk. Prioritize externally reachable or business-critical TLS services using affected BSAFE libraries, especially where client certificate authentication is enabled. It is not supported by the supplied evidence as a data compromise issue. Mitigation focus: Inventory systems and products using RSA BSAFE MES or SSL-C.; Upgrade MES 4.0.x to 4.0.8 or later where applicable.; Upgrade MES 4.1.x to 4.1.3 or later where applicable..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.