PT-2022-22167 · Dell · Dell Hybrid Client

Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue allows a guest attacker to potentially exploit a vulnerability, enabling the deletion of user and some system files and folders. This is related to a gedit vulnerability...

PT-2022-22166 · Dell · Dell Hybrid Client

Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue concerns a guest user profile corruption vulnerability. It could be exploited by a WMS privilege attacker, potentially leading to the DHC system becoming inaccessible...

Dell Hybrid Client 安全漏洞

Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. A security vulnerability previously existed in Dell Hybrid Client version 1.8, which stemmed from the inclusion of a Zip Bomb vulnerability in the UI....

Cloud Mobility for Dell EMC Storage 安全漏洞

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

Dell Hybrid Client 安全漏洞

Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. A security vulnerability previously existed in Dell Hybrid Client version 1.8, which stemmed from the inclusion of a gedit vulnerability. A guest...

Dell Enterprise SONiC OS has an unspecified vulnerability

Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open source network operating system from Dell, Inc. A remote attacker could exploit this vulnerability to cause unauthorized access to communications...

Unspecified Vulnerability in Wyse ThinOS

Wyse ThinOS is a specialized operating system for Dell servers from Dell USA. A security vulnerability exists in Wyse ThinOS that stems from the inclusion of a regular expression denial of service vulnerability in the UI, which can be exploited by an administrator privileged attacker to cause a...

PT-2022-22165 · Dell · Dell Hybrid Client

Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue concerns a Zip Bomb Vulnerability in the UI of Dell Hybrid Client, which could be exploited by an attacker with guest privileges, potentially leading to modification of system...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM by using SMI...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from an incorrect input validation issue...

Dell Container Storage Modules 路径遍历漏洞

Dell Container Storage Modules are a set of modules from Dell, Inc. It is designed to provide additional functionality beyond what is available in Container Storage. A security vulnerability exists in Dell Container Storage Modules version 1.2, which stems from an improper restriction on the...

CVE-2022-34402

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

CVE-2022-34402

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

Denial of service

Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker could potentially exploit this vulnerability, leading to denial-of-service...

Design/Logic Flaw

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2022-34425

Dell Enterprise SONiC OS versions 4.0.0–4.0.1 are affected by a cryptographic-key vulnerability in SSH caused by a hardcoded key, enabling an unauthenticated remote attacker to potentially access communications. The connected PT-2022-5021 entry provides concrete details and recommends immediate m...

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

CVE-2022-34402

Dell Wyse ThinOS 2205 UI is affected by a Regular Expression Denial of Service vulnerability. The root cause is an inefficient regex in the UI, which could be exploited by an admin-privileged attacker to cause a denial of service. The issue is documented across multiple sources (including NVD and...