PT-2023-13372 · Dell · Dell Supportassist For Business Pcs+1

CVE-2022-34386 · Publicado 2023-02-10 · Atualizado 2023-02-21

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior

Description The issue is related to a cryptographic weakness. An authenticated non-admin user could potentially exploit this issue and obtain sensitive information.

Recommendations For Dell SupportAssist for Home PCs versions 3.11.4 and prior, update to a version later than 3.11.4 to resolve the issue. For Dell SupportAssist for Business PCs versions 3.2.0 and prior, update to a version later than 3.2.0 to resolve the issue.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

CWE-321

Identificadores relacionados

CVE-2022-34386

Produtos afetados

Dell Supportassist For Business Pcs

Dell Supportassist For Home Pcs

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-34386 · Nota de Segurança
• https://dell.com/support/kbdoc/000204114 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2022-34386 · Aviso do Fabricante
• https://t.me/cvenotify/44088 · Publicação no Telegram