CVE-2022-34382

HIGH

Dell Command Update, Dell Update, Alienware Update < 4.6.0 - Local Privilege Escalation

Title source: llm
STIX 2.1

Description

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://www.dell.com/support/kbdoc/000202198

Scores

CVSS v3 7.8
EPSS 0.0005
EPSS Percentile 15.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (3)
dell/alienware_update < 4.6.0
dell/command_update < 4.6.0
dell/update < 4.6.0
Published Sep 02, 2022
Tracked Since Feb 18, 2026