Lucene search

[email protected]CVE-2022-34432

HistoryOct 11, 2022 - 5:15 p.m.

CVE-2022-34432

2022-10-1117:15:11

CWE-77

[email protected]

web.nvd.nist.gov

dell

hybrid client

gedit vulnerability

file deletion

cve-2022-34432

nvd

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.

Affected configurations

NVD

Node

dellhybrid_clientRange1.5–1.8

CPENameOperatorVersion
dell:hybrid_clientdell hybrid clientlt1.8

CPE	Name	Operator	Version
dell:hybrid_client	dell hybrid client	lt	1.8

CNA Affected

[
  {
    "vendor": "Dell",
    "product": "Dell Hybrid Client (DHC)",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.8",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities

Social References

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Related for CVE-2022-34432

cvelist1 prion1 nvd1