CVE-2022-34386

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-321 CWE-798

Affected software

Vendor	Product	Versions
Dell	SupportAssist Client Consumer	<= 3.11.4, 3.2.0

References

https://www.dell.com/support/kbdoc/000204114Vendor Advisory
https://www.dell.com/support/kbdoc/000204114Vendor Advisory

Timeline

Published: Feb 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-343877.8Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege CVE-2022-343887.1Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information CVE-2022-343895.3Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentiall CVE-2022-34399.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.CVE-2022-343907.8Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerab CVE-2022-343917.8Dell Client BIOS Versions prior to the remediated version contain an improper input validation vulnerability. A local authenticated maliciou CVE-2022-343925.5SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin CVE-2022-343937.5Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerabili CVE-2022-343943.7Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker CVE-2022-343967.8Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged auth CVE-2022-343975.7Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass CVE-2022-343987.0Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulne