Description
Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | System Update | ≤ 2.0.0 | — |
References
- https://www.dell.com/support/kbdoc/000203733 vendor-advisory