CVE-2022-24409

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-23 · updated 2026-06-17
Weakness: CWE-385

Description

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.

Affected products

Dell BSAFE SSL-J: from 6.1.0 before 6.4 — fixed in 6.4

How to fix

Upgrade to a fixed version: Dell BSAFE SSL-J 6.4. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000196312/dsa-2022-023-dell-bsafetm-ssl-j-6-4-security-update-for-a-single-covert-timing-channel
https://www.dell.com/support/kbdoc/en-us/000196312/dsa-2022-023-dell-bsafetm-ssl-j-6-4-security-update-for-a-single-covert-timing-channel

Get alerted when CVE-2022-24409 or the next vulnerability affects your stack