CVE-2022-24409
Last modified
CVE-2022-24409 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Bsafe Ssl-J | >= 6.1.0, < 6.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-24409?
How severe is CVE-2022-24409?
How do I fix CVE-2022-24409?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-24403The TETRA TA61 identity encryption function internally uses …4.3
- CVE-2022-24404Lack of cryptographic integrity check on TETRA air-interface…7.5
- CVE-2022-24405OX App Suite through 7.10.6 allows OS Command Injection via …9.8
- CVE-2022-24406OX App Suite through 7.10.6 allows SSRF because multipart/fo…6.5
- CVE-2022-24407In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/s…8.8
- CVE-2022-24408A vulnerability has been identified in SINUMERIK MC (All ver…7.8
- CVE-2022-2441The ImageMagick Engine plugin for WordPress is vulnerable to…8.8
- CVE-2022-24410 Dell BIOS contains an information exposure vulnerability. A…4.2
- CVE-2022-24411Dell PowerScale OneFS 8.2.2 and above contain an elevation o…7.8
- CVE-2022-24412Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an imprope…7.5
- CVE-2022-24413Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-…3.6
- CVE-2022-24414Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Toke…6.5
Are you affected by CVE-2022-24409?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
