PT-2022-16678 · Dell · Bsafe Ssl-J

Published 2022-02-23 · Updated 2022-09-30 · CVE-2022-24409

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell BSAFE SSL-J (affected versions not specified)

Description The issue concerns a covert timing channel that could potentially be exploited by malicious users to compromise the affected system. Details about this issue are currently restricted to customers with active BSAFE maintenance contracts, with public disclosure planned for a later date.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-385

Related Identifiers

CVE-2022-24409

Affected Products

Bsafe Ssl-J

References · 5

• https://dell.com/support/kbdoc/en-us/000196312/dsa-2022-023-dell-bsafetm-ssl-j-6-4-security-update-for-a-single-covert-timing-channel · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24409 · Security Note
• https://t.me/cvenotify/27251 · Telegram Post
• https://t.me/cibsecurity/37969 · Telegram Post