[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHtaDhlUbFLXAMsGUAZ54KA0xoCKO7KqRPnxL2Id675Y":3,"g5a-risk:CVE-2022-24422":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":64,"weaknessesCount":56,"isActivelyExploited":73,"cisaInfo":27,"otxData":27,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":110,"notableEvents":111},"CVE-2022-24422","What is CVE-2022-24422?","Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console.","Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may po...","2022-05-26T16:15:08.113","2022-06-07T17:07:01.157",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":40,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":38,"ImpactScore":39},"security_alert@emc.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":35,"Scope":36,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","REQUIRED","CHANGED",9.6,2.8,6,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":25,"ExploitabilityScore":46,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.5854,[47,47,47,47,47,47,47],"Critical",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"dell","idrac9","*","cpe:2.3:a:dell:idrac9:*:*:*:*:*:*:*:*",1,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Fkbdoc\u002Fen-us\u002F000199267\u002Fdsa-2022-068-dell-idrac9-security-update-for-an-improper-authentication-vulnerability","Dell",[62,63],"Patch","Vendor Advisory",[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2022-24422? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-24422, a critical severity cyber security vulnerability from 2022. High exploit probability (58.5%). Dell iDRAC9 versions ...","CVE-2022-24422, CVE-2022-24422 vulnerability, CVE-2022-24422 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, dell security, idrac9 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-24422",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-24422","Cybersecurity","CVE-2022-24422, CVE-2022-24422 vulnerability, CVE-2022-24422 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":27,"Negate":27,"Nodes":102},[103],{"Operator":104,"Negate":27,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":27},"B2CC8B5B-1C7D-4760-BA05-D1C538E12C01","5.00.00.00","5.10.10.00",[],[112,119],{"id":113,"eventType":114,"eventTime":115,"details":116,"label":117,"color":118},"3d88bf09-4246-4547-b4d4-f2c2d5a43990","LOW_EPSS_DELTA","2025-07-26T04:05:27.371137+00:00","Daily EPSS score decreased by 0.123 on 2023-12-30","EPSS Score Decreased","green",{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"a5938067-fe00-4d47-ba0b-1fa3fad51564","HIGH_EPSS_DELTA","2025-11-22T04:05:33.278269+00:00","Daily EPSS score increased by 0.417 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":127,"version":43},1792439785088,{"score":129,"band":130,"action":131,"scoredAt":132},61,"Medium","Plan remediation","2026-10-16T06:54:36.978247+00:00"]