CVE-2022-34458: Medium severity dell update vulnerability
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-34458?
CVE-2022-34458 is a vulnerability in Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 that allows exposure of sensitive system information to an unauthorized control sphere during the download operation.
How severe is CVE-2022-34458?
CVE-2022-34458 has a severity score of 5.5, which is considered medium.
Which software versions are affected by CVE-2022-34458?
Dell Alienware Update, Dell Command Update, and Dell Update versions up to but excluding 4.7.1 are affected by CVE-2022-34458.
How can a local malicious user exploit CVE-2022-34458?
A local malicious user could potentially exploit CVE-2022-34458 by taking advantage of the vulnerability in the download operation component, leading to the disclosure of sensitive system information.
How can I fix CVE-2022-34458?
To fix CVE-2022-34458, it is recommended to update Dell Alienware Update, Dell Command Update, and Dell Update to version 4.7.1 or later.