How severe is CVE-2022-34381?

CVE-2022-34381 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.

Is CVE-2022-34381 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-34381?

CVE-2022-34381 primarily affects Dell Bsafe Ssl-j. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2022-34381?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2022-34381 have an EU (EUVD) identifier?

Yes. CVE-2022-34381 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2022-37336.

When was CVE-2022-34381 published?

CVE-2022-34381 was published on 2024-02-02 and last updated on 2026-06-17.

CVE-2022-34381

CVE-2022-34381 is a critical-severity vulnerability in Dell Bsafe Ssl-j with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1329.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2022-37336
Weakness: CWE-1329
Affected product: Dell Bsafe Ssl-j
Published: 2024-02-02
Last modified: 2026-06-17

Description

Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted system. This is a Critical vulnerability and Dell recommends customers to upgrade at the earliest opportunity.

Frequently asked questions

What is CVE-2022-34381?: Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted system. This is a Critical vulnerability and Dell recommends customers to upgrade at the earliest opportunity.
How severe is CVE-2022-34381?: CVE-2022-34381 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.
Is CVE-2022-34381 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-34381?: CVE-2022-34381 primarily affects Dell Bsafe Ssl-j. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2022-34381?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2022-34381 have an EU (EUVD) identifier?: Yes. CVE-2022-34381 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2022-37336.
When was CVE-2022-34381 published?: CVE-2022-34381 was published on 2024-02-02 and last updated on 2026-06-17.

References

https://www.dell.com/support/kbdoc/en-us/000203278/dsa-2022-208-dell-bsafe-ssl-j-6-5-and-7-1-and-dell-bsafe-crypto-j-6-2-6-1-and-7-0-security-vulnerability

Affected products (3)

cpe:2.3:a:dell:bsafe_ssl-j:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:bsafe_ssl-j:7.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:bsafe_crypto-j:*:*:*:*:*:*:*:*

More vulnerabilities in Dell Bsafe Ssl-j

CVE-2015-0534 — High (CVSS 7.5): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA…
CVE-2004-0079 — High (CVSS 7.5): The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause…
CVE-2001-1105 — High (CVSS 7.5): RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which…
CVE-2019-3740 — Medium (CVSS 6.5): RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy…
CVE-2019-3739 — Medium (CVSS 6.5): RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy…
CVE-2019-3738 — Medium (CVSS 6.5): RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A…

All CVEs affecting Dell Bsafe Ssl-j →

Other CWE-1329 vulnerabilities

CVE-2026-48576 — High (CVSS 7.9): Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-48573 — High (CVSS 7.9): Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-41097 — Medium (CVSS 6.7): Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a…
CVE-2021-38398 — Medium (CVSS 6.5): The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker…
CVE-2026-21265 — Medium (CVSS 6.4): Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching…

Browse all CWE-1329 vulnerabilities →