Guest User Profile Corruption Vulnerability in Dell Hybrid Client
CVE-2022-34431

6.5MEDIUM

Key Information:

Vendor
Dell
Status
Dell Hybrid Client (dhc)
Vendor
CVE Published:
11 October 2022

Summary

The Dell Hybrid Client software, specifically versions below 1.8, contains a vulnerability that allows for corruption of the guest user profile. An attacker with WMS privileges could exploit this weakness, rendering the DHC system inaccessible, which poses significant challenges for users reliant on the platform for seamless operation.

Affected Version(s)

Dell Hybrid Client (DHC) < 1.8

References

https://www.dell.com/support/kbdoc/en-us/000203345/dsa-20...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.