What’s Vulnerable › Vulnerabilities

CVE-2006-1117

• Severity: low (CVSS 2.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-03-09 · updated 2026-06-16

Description

nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.

Affected products

• Ncipher Dse200 Document Sealing Engine: all versions
• Ncipher Ncore: all versions
• Ncipher Nethsm: 2.0, 2.1, 2.1.12_cam5
• Ncipher Nforce: all versions
• Ncipher Nshield: all versions
• Ncipher Payshield: all versions
• Ncipher Securedb: all versions
• Ncipher Time Source Master Clock: all versions

References

• http://secunia.com/advisories/19137
• http://securitytracker.com/id?1015718
• http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security
• http://www.securityfocus.com/archive/1/427151/100/0/threaded
• http://www.securityfocus.com/bid/17012
• http://www.vupen.com/english/advisories/2006/0862
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25063
• http://secunia.com/advisories/19137
• http://securitytracker.com/id?1015718
• http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security
• http://www.securityfocus.com/archive/1/427151/100/0/threaded
• http://www.securityfocus.com/bid/17012

Get alerted when CVE-2006-1117 or the next vulnerability affects your stack