Regular Expression Denial of Service Vulnerability in Dell Hybrid Client Software
CVE-2022-34428
5MEDIUM
Summary
The Dell Hybrid Client prior to version 1.8 is vulnerable to a Regular Expression Denial of Service attack in its user interface. This weakness allows an attacker with WMS group admin access to exploit the vulnerability, potentially resulting in a temporary denial of service. Organizations using affected versions should prioritize upgrading their software to mitigate this security risk. For more information, refer to Dell's security update.
Affected Version(s)
Dell Hybrid Client (DHC) < 1.8
References
CVSS V3.1
Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved