PT-2023-13372 · Dell · Dell Supportassist For Business Pcs+1

Published 2023-02-10 · Updated 2023-02-21 · CVE-2022-34386

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior

Description The issue is related to a cryptographic weakness. An authenticated non-admin user could potentially exploit this issue and obtain sensitive information.

Recommendations For Dell SupportAssist for Home PCs versions 3.11.4 and prior, update to a version later than 3.11.4 to resolve the issue. For Dell SupportAssist for Business PCs versions 3.2.0 and prior, update to a version later than 3.2.0 to resolve the issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

CVE-2022-34386

Affected Products

Dell Supportassist For Business Pcs

Dell Supportassist For Home Pcs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-34386 · Security Note
• https://dell.com/support/kbdoc/000204114 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34386 · Vendor Advisory
• https://t.me/cvenotify/44088 · Telegram Post