CVE-2006-1117 json
nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engin…
published 2006-03-09 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1121
- cvss
- 2.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 60%
- public exploits
- 0
- none known
Summary
nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.
Patch / fix
Exploit prediction
0.92% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:P/I:N/A:N |
References
-
ncipher.com
/resources/97/sa14_presence_of_flaws_in_firmware_security
patch, vendor-advisory
-
securitytracker.com
/id?1015718
vdb-entry, patch, vendor-advisory
-
securityfocus.com
/bid/17012
vdb-entry, patch
-
secunia.com
/advisories/19137
third-party-advisory, patch, vendor-advisory
-
vupen.com
/english/advisories/2006/0862
vdb-entry
-
securityfocus.com
/archive/1/427151/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25063
vdb-entry
Sources
- CVE List CVE-2006-1117
- NVD CVE-2006-1117
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.