CVE-2022-34387
11.02.2023, 01:23
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the system.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | supportassist_for_business_pcs | 𝑥 ≤ 3.2.0 |
| dell | supportassist_for_home_pcs | 𝑥 ≤ 3.11.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-377 - Insecure Temporary FileCreating and using insecure temporary files can leave application and system data vulnerable to attack.
- CWE-668 - Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.