HIGH🇬🇧 English

CVE-2022-34459

CVSS 7.8v3.1pub. 2023-02-01upd. 2024-11-21

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Dell Alienware Update

    APP
    Dell
    < 4.7.1
  • Dell Command Update

    APP
    Dell
    < 4.7.1
  • Dell Update

    APP
    Dell
    < 4.7.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-34384HIGH7.8ten sam produkt

Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 a...

CVE-2022-34382HIGH7.8ten sam produkt

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escal...

CVE-2022-24426HIGH7.8ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation V...

CVE-2024-28962MEDIUM6.5ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Danger...

CVE-2023-28065MEDIUM6.7ten sam produkt

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operati...

CVE-2022-34459 — HIGH 7.8 | CVEbaza.pl