Lucene search
HistoryFeb 10, 2023 - 8:15 p.m.
CVE-2022-34366
cve-2022-34366
dell supportassist
cross-domain whitelist
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
27.8%
Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
Affected configurations
Node
dellsupportassist_for_home_pcsRange≤3.11.2
References
Related
cnvd
cnvd
Dell SupportAssist for Home PCs Information Disclosure Vulnerability
2023-02-15 00:00:00
prion
prion
Cross site scripting
2023-02-10 20:15:00
cvelist
cvelist
CVE-2022-34366
2023-02-10 19:18:37
cve
cve
CVE-2022-34366
2023-02-10 20:15:53
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
27.8%
Related for NVD:CVE-2022-34366