Lucene search

K
nvd[email protected]NVD:CVE-2022-34457
HistoryJan 18, 2023 - 12:15 p.m.

CVE-2022-34457

2023-01-1812:15:10
CWE-732
CWE-284
web.nvd.nist.gov
2
dell command configuration
version 4.8
improper folder permission
privilege escalation
critical severity

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

13.0%

Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and able to make application unavailable for all users.

Affected configurations

Nvd
Node
dellcommand\|configureRange<4.9.0
VendorProductVersionCPE
dellcommand\|configure*cpe:2.3:a:dell:command\|configure:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

13.0%

Related for NVD:CVE-2022-34457