DSA-2022-297: Dell Command | Configure Security Update for Multiple Vulnerabilities
概要: Dell Command | Configure remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
High
詳細
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34457 | Dell Command | Configure versions before 4.9.0 contain an Improper Access Control vulnerability. A local low-privileged attacker may potentially exploit this vulnerability, leading to the escalation of privilege. This vulnerability is considered critical as it allows a nonadministrator to modify files inside the installed directory and make the application unavailable for all users. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Third-party Component | CVES | More information |
| OpenSSL (3.0.0) | CVE-2022-3602 | https://nvd.nist.gov/vuln/detail/CVE-2022-3602 |
| CVE-2022-3786 | https://nvd.nist.gov/vuln/detail/CVE-2022-3786 |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34457 | Dell Command | Configure versions before 4.9.0 contain an Improper Access Control vulnerability. A local low-privileged attacker may potentially exploit this vulnerability, leading to the escalation of privilege. This vulnerability is considered critical as it allows a nonadministrator to modify files inside the installed directory and make the application unavailable for all users. | 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| Third-party Component | CVES | More information |
| OpenSSL (3.0.0) | CVE-2022-3602 | https://nvd.nist.gov/vuln/detail/CVE-2022-3602 |
| CVE-2022-3786 | https://nvd.nist.gov/vuln/detail/CVE-2022-3786 |
影響を受ける製品と修復
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2022-3602 | Dell Command | Configure | Versions before 4.9.0 | 4.9.0 | https://www.dell.com/support/home/drivers/driversdetails?driverid=0H64D |
| CVE-2022-3786 | ||||
| CVE-2022-34457 |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2022-3602 | Dell Command | Configure | Versions before 4.9.0 | 4.9.0 | https://www.dell.com/support/home/drivers/driversdetails?driverid=0H64D |
| CVE-2022-3786 | ||||
| CVE-2022-34457 |
変更履歴
| Revision | Date | Description |
| 1.0 | 2022-11-22 | Initial Release |
確認
CVE-2022-34457: Dell Technologies would like to thank Pwni for reporting this issue.
関連情報
法的免責事項
対象製品
Dell Command | Configure, Product Security Information文書のプロパティ
文書番号: 000205633
文書の種類: Dell Security Advisory
最終更新: 22 11月 2022
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。