BFCClient vulnerabilities

3 known vulnerabilities in BFCClient from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OpenSSL: Improper Certificate Validation

  CVE-2023-0464Mar 22, 2023OpenSSLEPSS 3.98%

  A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate c

• 7.4 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2023-0286Feb 8, 2023OpenSSLEPSS 68.4%

  There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field

• 7.5 High severity

  OpenSSL: Loop with Unreachable Exit Condition

  CVE-2022-0778Mar 15, 2022OpenSSLEPSS 73.2%

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or ex