Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6g5x-x9xj-hxm2

Опубликовано: 01 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.

EPSS

Процентиль: 12%
0.00039
Низкий

7.8 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.

CVSS3: 7.8
fstec
около 3 лет назад

Уязвимость программных средств Dell Command | Update, Dell Update и Alienware Update, связанная с некорректной проверкой криптографической подписи, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 12%
0.00039
Низкий

7.8 High

CVSS3

Дефекты

CWE-347