Vulnerability · Published Feb 23, 2022 · Assigned by dell
CVE-2022-24409
Medium 5.9
In plain English
A medium-severity security flaw in Dell BSAFE SSL-J from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)1.0%top 38.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell BSAFE SSL-J | 5.1 – before unspecifiedunspecified – before 6.4 |
Weakness: CWE-385 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N