CVE-2015-0537

highpriority · track · 40EPSS 0.026 · 86 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.64% (86th) EPSS

CVSS 7.5 · high

Is it mine?

7 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-28

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-191USprimary

affected products (7)

Products and version ranges known to be affected.

EMC Avamarall versionscert_bundDEcpe:/a:emc:avamar:-
RSA BSAFEall versionscert_bundDEcpe:/a:rsa:bsafe_micro_edition_suite:-
n/a n/a≤ n/aenisa_euvdEU
dell bsafe4.0.0 → 4.0.8nvdUScpe:2.3:a:dell:bsafe:*:*:*:*:*:*:*:*
dell bsafe4.1.0 → 4.1.3nvdUScpe:2.3:a:dell:bsafe:*:*:*:*:*:*:*:*
dell bsafe crypto-c< 4.0.4nvdUScpe:2.3:a:dell:bsafe_crypto-c:*:*:*:*:*:*:*:*
dell bsafe ssl-c≤ 2.8.9nvdUScpe:2.3:a:dell:bsafe_ssl-c:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2024-0285RSA BSAFE: Mehrere SchwachstellenDeutsch2015-08-20csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in RSA BSAFE ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff oder weiter Angriffe mit nicht spezifizierten Auswirkungen durchführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd NVD CVE.org MITRE

published 2015-08-20modified 2026-06-17

related (720)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-0185US	high8.4OT critical	25.2% (98th)	KEV	2022-02-11
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	2021-06-08
Windows NTFS Elevation of Privilege Vulnerability
CVE-2014-0497US	critical9.8OT critical	99.9% (100th)	KEV	2014-02-05
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta…
CVE-2019-12255US	critical9.8	75.3% (100th)	Exploit	2019-08-09
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVE-2017-14496US	high7.5	68.4% (99th)	Exploit	2017-10-03
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a…

+715 more

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan