Lucene search

K
nvd[email protected]NVD:CVE-2022-34404
HistoryFeb 11, 2023 - 1:23 a.m.

CVE-2022-34404

2023-02-1101:23:24
CWE-295
web.nvd.nist.gov
dell system update
version 2.0.0
improper certificate validation
data parser module
local attacker
high privileges
vulnerability
credential theft
denial of service

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

Affected configurations

NVD
Node
dellsystem_updateRange<2.0.1.0

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2022-34404