Lucene search
HistorySep 30, 2022 - 8:15 p.m.
CVE-2022-34428
dell hybrid client
vulnerability
regular expression
denial of service
wms group admin
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
31.4%
Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service.
Affected configurations
Node
dellhybrid_clientMatch1.5
ORdellhybrid_clientMatch1.6
ORdellhybrid_clientMatch1.6.1
ORdellhybrid_clientMatch1.6.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | hybrid_client | 1.5 | cpe:2.3:a:dell:hybrid_client:1.5:*:*:*:*:*:*:* |
| dell | hybrid_client | 1.6 | cpe:2.3:a:dell:hybrid_client:1.6:*:*:*:*:*:*:* |
| dell | hybrid_client | 1.6.1 | cpe:2.3:a:dell:hybrid_client:1.6.1:*:*:*:*:*:*:* |
| dell | hybrid_client | 1.6.2 | cpe:2.3:a:dell:hybrid_client:1.6.2:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2022-09-30 20:15:00
cvelist
cvelist
CVE-2022-34428
2022-09-30 19:25:09
cnvd
cnvd
Dell Hybrid Client Denial of Service Vulnerability
2022-10-09 00:00:00
cve
cve
CVE-2022-34428
2022-09-30 20:15:09
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
31.4%
Related for NVD:CVE-2022-34428