CVE-2022-34459
EUVD-2022-3741401.02.2023, 05:15
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | alienware_update | 𝑥 < 4.7.1 |
| dell | command_update | 𝑥 < 4.7.1 |
| dell | update | 𝑥 < 4.7.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration