TI-2022-06838 Aliases CVE-2022-22564 GHSA-cr87-3776-x62w

Broken or risky cryptographic algorithm in Dell Unity

LOW 27CWE-327Published 2023-02-14 · Updated 2025-03-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-327.

Summary

Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00451 39th percentileScored 2026-11-07

Fix Fixed Unity (Dell): 5.2.0.0.5.173

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	Unity	before 5.2.0.0.5.173	5.2.0.0.5.173	Patch available	CNA

Unity VendorDell Affected before 5.2.0.0.5.173 Fixed in 5.2.0.0.5.173 Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:emc_unity_operating_environment::::::::	before 5.2.0.0.5.173	Vulnerable	Dell
cpe:2.3:a:dell:emc_unity_xt_operating_environment::::::::	before 5.2.0.0.5.173	Vulnerable	Dell
cpe:2.3:a:dell:emc_unityvsa_operating_environment::::::::	before 5.2.0.0.5.173	Vulnerable	Dell

cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:* Versions before 5.2.0.0.5.173 Vulnerable ·Dell
cpe:2.3:a:dell:emc_unity_xt_operating_environment:*:*:*:*:*:*:*:* Versions before 5.2.0.0.5.173 Vulnerable ·Dell
cpe:2.3:a:dell:emc_unityvsa_operating_environment:*:*:*:*:*:*:*:* Versions before 5.2.0.0.5.173 Vulnerable ·Dell

Remediation

Fix · CNA Unity (Dell) Fixed in 5.2.0.0.5.173

Timeline

2026-10-02 Threatist record created from CVE-2022-22564
2026-10-03 Alias added: GHSA-cr87-3776-x62w

References

Advisory 1

https://www.dell.com/support/kbdoc/en-us/000199050/dsa-2022-021-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities

TI-2021-14655 OS command injection in Dell VNX2 CVSS 3.1CRITICAL 9.8
TI-2018-01098 XML external entity injection in Dell EMC Unisphere for VMAX Virtual Appliance, Dell EMC… CVSS 3.0CRITICAL 9.8
TI-2021-14660 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass… CVSS 3.1CRITICAL 9.8
TI-2021-14656 Path traversal in Dell VNX2 CVSS 3.1CRITICAL 9.1
TI-2021-14662 OS command injection in Dell VNX Control Station CVSS 3.1HIGH 7.2
TI-2021-14661 OS command injection in Dell VNX Control Station CVSS 3.1HIGH 7.2

See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences