PT-2023-12706 · Dell Emc · Dell Emc Unity

Published 2023-02-14 · Updated 2023-02-22 · CVE-2022-22564

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC Unity versions before 5.2.0.0.5.173

Description The issue is related to the use of a broken cryptographic algorithm. A remote unauthenticated attacker could potentially exploit this by performing Man-in-the-Middle (MitM) attacks, allowing attackers to obtain sensitive information.

Recommendations For versions before 5.2.0.0.5.173, update to version 5.2.0.0.5.173 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to minimize the risk of MitM attacks.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2022-22564

Affected Products

Dell Emc Unity

References · 4

• https://osv.dev/vulnerability/CVE-2022-22564 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000199050/dsa-2022-021-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22564 · Security Note
• https://t.me/cibsecurity/58115 · Telegram Post