CVE-2022-34404

6.0 mediumEPSS 0.2%

Medium (6.0) in dell system update. EPSS 0.2% chance of exploitation in the next 30 days.

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

Severity

CVSS 3.1

6.0 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2023-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:system_update

References

https://www.dell.com/support/kbdoc/000203733
https://www.dell.com/support/kbdoc/000203733

Check your stack JSON