CVE-2025-46638
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | BSAFE SSL-J | < 7.4 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-46638
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to a Denial of Service (DoS).
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不加限制或调节的资源分配
Source: NVD (National Vulnerability Database)
Vulnerability Title
Dell BSAFE 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell BSAFE是美国戴尔（Dell）公司的一款安全软件产品，它支持加密算法、证书链验证和传输层安全性（TLS）加密套件等，以帮助用户实现其应用程序的各种安全目标。 Dell BSAFE存在安全漏洞，该漏洞源于资源分配无限制或节流，可能导致未经身份验证的远程攻击者造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | BSAFE SSL-J | 0 ~ 7.4 | - |
II. Public POCs for CVE-2025-46638
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-46638
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-46638 (1)
IV. Related Vulnerabilities
Same product: BSAFE SSL-J
Same weakness: CWE-770
- CVE-2026-27869
WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REG - CVE-2026-48854
Unbounded request body accumulation causes memory exhaustion - CVE-2026-8683
Overly long URLs crash the Mattermost Desktop App - CVE-2026-53522
Nezha Monitoring: Unbounded WebSocket Streams — Resource Exh - CVE-2026-50560
Netty susceptible to HTTP/2 Reset Attack with different on-t
V. Comments for CVE-2025-46638
No comments yet