CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-34404
https://notcve.org/view.php?id=CVE-2022-34404
Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service. • https://www.dell.com/support/kbdoc/000203733 • CWE-295: Improper Certificate Validation •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2022-34384
https://notcve.org/view.php?id=CVE-2022-34384
Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation. • https://www.dell.com/support/kbdoc/000204114 • CWE-250: Execution with Unnecessary Privileges CWE-269: Improper Privilege Management •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2023-23698
https://notcve.org/view.php?id=CVE-2023-23698
Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete. • https://www.dell.com/support/kbdoc/en-us/000208038/dsa-2023-031 • CWE-1386: Insecure Operation on Windows Junction / Mount Point •
CVSS: 6.6EPSS: 0%CPEs: 3EXPL: 0CVE-2022-34458
https://notcve.org/view.php?id=CVE-2022-34458
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data. • https://www.dell.com/support/kbdoc/en-us/000204950/dsa-2022-298 • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-34459
https://notcve.org/view.php?id=CVE-2022-34459
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution. • https://www.dell.com/support/kbdoc/en-us/000204950/dsa-2022-298 • CWE-347: Improper Verification of Cryptographic Signature •