Rate Limit Bypass in Dell SupportAssist

CVE-2022-34389

Summary

Dell SupportAssist suffers from a rate limit bypass vulnerability in its screenmeet API component. This flaw allows an unauthenticated attacker to impersonate a legitimate customer, potentially leading to unauthorized access to support services provided by Dell. Exploiting this vulnerability could undermine customer trust and facilitate further malicious actions against both customers and the support infrastructure.

References