medium6.5
CVE-2022-34404
Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module.
Impact
Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | System Update | before 2.0.1.0 |