CVE-2022-34387

MEDIUM

Dell Supportassist For Business Pcs < 3.2.0 - Exposure to Wrong Actor

Title source: rule

Description

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the system.

References (1)

[Vendor Advisory] https://www.dell.com/support/kbdoc/000204114

Scores

CVSS v3 6.4

EPSS 0.0004

EPSS Percentile 13.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-377 CWE-668

Status published

Affected Products (2)

dell/supportassist_for_business_pcs < 3.2.0

dell/supportassist_for_home_pcs < 3.11.4

Timeline

Published Feb 11, 2023

Tracked Since Feb 18, 2026