CVE-2022-34458: dell alienware_update

Vulnerability summary

CVE-2022-34458 is a medium (CVSS 6.6) vulnerability in dell alienware_update. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.1% of scored vulnerabilities.

Timeline

1. 01-02-2023
   PublishedVulnerability first disclosed.
2. 27-03-2025
   Last modifiedVulnerability information updated.

Description

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the disclosure of confidential data.

• CWE-497Exposure of Sensitive System Information to an Unauthorized Control SphereThe product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.