CVE-2022-22553

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users.

• CWE-307
• CWE-307

• https://www.dell.com/support/kbdoc/000195377Patch, Vendor Advisory
• https://www.dell.com/support/kbdoc/000195377Patch, Vendor Advisory

Published

Jan 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22547Simple Diagnostics Agent - versions 1.0 (up to version 1.57.…7.5
• CVE-2022-22549Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Cert…8.1
• CVE-2022-2255A vulnerability was found in mod_wsgi. The X-Client-IP heade…7.5
• CVE-2022-22550Dell PowerScale OneFS, versions 8.2.2 and above, contain a p…6.7
• CVE-2022-22551DELL EMC AppSync versions 3.9 to 4.3 use GET request method …8.8
• CVE-2022-22552Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking …6.1
• CVE-2022-22554Dell EMC System Update, version 1.9.2 and prior, contain an …5.5
• CVE-2022-22555Dell EMC PowerStore, contains an OS command injection Vulner…6.7
• CVE-2022-22556Dell PowerStore contains an Uncontrolled Resource Consumptio…7.5
• CVE-2022-22557PowerStore contains Plain-Text Password Storage Vulnerabilit…7.8
• CVE-2022-22558Dell PowerEdge Server BIOS and Dell Precision Workstation 79…6
• CVE-2022-22559Dell PowerScale OneFS, version 9.3.0, contains a use of a br…7.5