Back to Database
Status published
Medium
CVE-2002-0940
domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not...
Vulnerability Description
domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0940
Credits & Attribution
No credits recorded in the NVD database.
References
More from ncipher
View All →CVE-2006-1117
nCipher firmware before V10, as used by (1) nShield, (2)...
Low
2.6
CVE-2006-1116
The CBC-MAC integrity functions in the nCipher nCore API before...
Medium
5
CVE-2006-1115
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key...
Low
2.6
CVE-2004-0320
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through...
Low
2.1
CVE-2004-0063
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18...
High
7.5
Affected Vendor
ncipher
View all reports →Affected Software
mscapi csp
Vulnerable Versions:
5.50, 5.54
Timeline
Official Publish:
August 31st, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.