CVE-2022-22554 HIGH

CVE-2022-22554

Vendor Dell
Product DellEMC System Update - DSU
Weakness CWE-256
Published January 24, 2022
Last update September 16, 2024

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potentially exploit this vulnerability leading to the disclosure of user passwords.

Key dates

02Disclosure timeline

January 24, 2022 CVE published
September 16, 2024 Record updated