Skip to content
OpenAdvisories
High · 7.3 CVE-2022-34457 EUVD-2022-37412GHSA-2xwp-3v4p-x875

Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secure…

Published Jan 18, 2023 · Updated Apr 3, 2025 · Assigned by dell

Description

Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default path but to non-secured path which leads to privilege escalation. This is critical severity vulnerability as it allows non-admin to modify the files inside installed directory and able to make application unavailable for all users.

Affected products

VendorProductAffectedFixed
Dell Dell Command Configure (DCC) ≤ 4.8 —

References