Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Dell SupportAssist — dell.com/support/kbdoc/000204114 Clear all filters
TI-2022-15291 CVE-2022-34392 · GHSA-p45m-mv49-39fw

Insufficient session expiration in Dell SupportAssist

Priority LOW 24

SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2023-02-10 No fix listed CWE-613
TI-2022-15288 CVE-2022-34389 · GHSA-662p-4xh8-66rf

Missing brute-force protection in Dell SupportAssist

Priority LOW 24

Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00442 Published 2023-02-10 No fix listed CWE-307
TI-2022-15287 CVE-2022-34388 · GHSA-q7w7-vvpc-6qmp

Cleartext storage of sensitive information in Dell SupportAssist

Priority LOW 30

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0016 Published 2023-02-10 No fix listed CWE-318
TI-2022-15286 CVE-2022-34387 · GHSA-63fq-p354-4c4w

Exposure of resource to wrong sphere in Dell SupportAssist

Priority LOW 35

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00153 Published 2023-02-10 No fix listed CWE-377