GCVE-110-CERTCC-2015-925497

Advisory PublishedCVSS 9.4/10

Vulnetix · Advisory published November 24, 2015

Dell System Detect installs the DSDTestProvider certificate into theTrusted Root Certificate Store on Microsoft Windows systems. The certificate includes the private key. This allows attackers to create trusted certificates and perform impersonation, man-in-the-middle (MiTM), and passive decryption attacks, resulting in the exposure of sensitive information.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.4/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population3d1_direct_report0

certcc-cvss-temporal-env

temporal_score8.5remediation_levelTFreport_confidenceCenvironmental_score6.36840528912target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND