Dell Hybrid Client vulnerabilities

10 CVEs affecting Dell Hybrid Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32476, published 2023-07-20.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-34428, published 2022-09-30. Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability,…
• CVE-2022-34431, published 2022-10-11. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being…
• CVE-2022-34430, published 2022-10-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
• CVE-2022-34432, published 2022-10-11. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.
• CVE-2021-21537, published 2021-04-30. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive…
• CVE-2021-21536, published 2021-04-30. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to register the client to a server in…
• CVE-2021-21534, published 2021-04-30. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive…
• CVE-2022-34429, published 2022-09-30. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
• CVE-2021-21535, published 2021-04-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain root…
• CVE-2023-32476, published 2023-07-20. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on the device can access hard coded secrets in javascript files.