CVE-2022-34404 Security feature bypass in System Update

What is CVE-2022-34404?

CVE-2022-34404 is a medium-severity vulnerability in Dell System Update, published on 10 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could potentially exploit this vulnerability, leading to credential theft and/or denial of service.

Weakness: CWE-295

Which versions are affected by CVE-2022-34404?

It affects 1 product.

Products include Dell System Update.

How do I fix CVE-2022-34404?

No fix has been published for CVE-2022-34404 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-34404 being exploited?

There is no known exploitation of CVE-2022-34404 in the wild and no public exploit code.

Other vulnerabilities in Dell System Update

• CVE-2026-86360 Path traversal in System Update Critical 9.6
• CVE-2026-86361 Privilege escalation in System Update High 8.2
• CVE-2026-86362 Privilege escalation in System Update High 8.2
• CVE-2026-63697 Security feature bypass in System Update High 7.6
• CVE-2026-71168 Path traversal in System Update High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7jvq-hrp2-xm5c.