6.5
Moyenne
CVE-2022-34404 Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module
Description
Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| System Update 2.0 | premières → 2.0.0 | Pas de correctif indiqué |
Autres CVE de System Update
Les 6 CVE de System Update →
CVE-2026-86362
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability
8.2
Élevée
CVE-2026-86361
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource…
8.2
Élevée
CVE-2026-63697
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability
7.6
Élevée
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory…
9.6
Critique