Lucene search
HistorySep 30, 2022 - 8:15 p.m.
CVE-2022-34429
dell hybrid client
zip slip vulnerability
guest privilege
system files modification
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
10.1%
Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
Affected configurations
Node
dellhybrid_clientMatch1.5
ORdellhybrid_clientMatch1.6
ORdellhybrid_clientMatch1.6.1
ORdellhybrid_clientMatch1.6.2
Related
prion
prion
Code injection
2022-09-30 20:15:00
cvelist
cvelist
CVE-2022-34429
2022-09-14 00:00:00
cnvd
cnvd
Dell Hybrid Client Path Traversal Vulnerability
2022-10-09 00:00:00
cve
cve
CVE-2022-34429
2022-09-30 20:15:09
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
10.1%
Related for NVD:CVE-2022-34429