Privilege Escalation in Dell SupportAssist for Home and Business PCs
CVE-2022-34387

6.4MEDIUM

Key Information:

Vendor

Dell
Status
Supportassist
Vendor
CVE Published:
11 February 2023

What is CVE-2022-34387?

Dell SupportAssist for Home and Business PCs suffers from a privilege escalation vulnerability that can be exploited by a local authenticated malicious user. This flaw allows the attacker to elevate their privileges, potentially leading to total system control. Affected versions include SupportAssist for Home PCs up to version 3.11.4 and SupportAssist for Business PCs up to version 3.2.0.

Affected Version(s)

SupportAssist 0 <= 3.11.4, 3.2.0

References

https://www.dell.com/support/kbdoc/000204114
vendor-advisory

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.