CVE-2006-1117 - CVE House
Back to Database
Status published Low CVE-2006-1117

nCipher firmware before V10, as used by (1) nShield, (2)...

Vulnerability Description

nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-1117

Credits & Attribution

No credits recorded in the NVD database.

References

More from ncipher

View All →
CVE-2006-1116
The CBC-MAC integrity functions in the nCipher nCore API before...
Medium 5
CVE-2006-1115
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key...
Low 2.6
CVE-2004-0320
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through...
Low 2.1
CVE-2004-0063
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18...
High 7.5
CVE-2003-1417
nCipher Support Software 6.00, when using generatekey KeySafe to import...
Medium 4.4

Affected Vendor

Affected Software

dse200 document sealing engine, ncore, nforce, securedb, time source master clock, nethsm, nshield, payshield
Vulnerable Versions:
2.0, 2.1, 2.1.12_cam5

Timeline

Official Publish: March 9th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.