Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jvq-hrp2-xm5c

Опубликовано: 11 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

EPSS

Процентиль: 16%
0.0005
Низкий

6 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 6.5
nvd
почти 3 года назад

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

EPSS

Процентиль: 16%
0.0005
Низкий

6 Medium

CVSS3

Дефекты

CWE-295