Improper Input Validation in Dell Rugged Control Center Affects Local Privilege Escalation
CVE-2022-34443

7.8HIGH

Key Information:

Vendor

Dell
Status
Rugged Control Center (rcc)
Vendor
CVE Published:
1 February 2023

What is CVE-2022-34443?

Dell Rugged Control Center prior to version 4.5 is affected by an improper input validation vulnerability in the Service Endpoint. This flaw allows a local low privilege attacker to potentially exploit the system, leading to an escalation of privileges, which could compromise the integrity and security of the affected environment.

Affected Version(s)

Rugged Control Center (RCC) 0 < 4.5

References

https://www.dell.com/support/kbdoc/en-us/000206103/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.