CVE-2022-34392

SupportAssist for Home PCs versions 3.11.4 and prior contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information...

CVE-2022-34392

Dell SupportAssist for Home PCs, version 3.11.4 and earlier, has an insufficient session expiration vulnerability. An authenticated non-admin user can obtain a refresh token, reuse the access token, and access sensitive information. Root cause: improper session expiration handling. No remediation...

CVE-2022-34366

Dell SupportAssist for Home PCs version 3.11.2 and prior contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

CVE-2022-34387

CVE-2022-34387 affects Dell SupportAssist for Home PCs (v3.11.4 and earlier) and SupportAssist for Business PCs (v3.2.0 and earlier). The vulnerability is a local privilege escalation: a logged-in attacker could elevate privileges and gain total control of the system. Technical details in connect...

CVE-2022-34385

Dell SupportAssist for Home PCs (versions ≤ 3.11.4) and SupportAssist for Business PCs (versions ≤ 3.2.0) are described as affected by a cryptographic weakness that could allow an authenticated non-admin user to obtain sensitive information. The connected Nessus entry for Dell SupportAssist

CVE-2022-34366

Dell SupportAssist for Home PCs (versions 3.11.2 and prior) contains an Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit this to obtain sensitive information. This CVE (CVE-2022-34366) is supported by multiple repositories documenti...

PT-2023-13373 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior Description: A privilege escalation issue exists, allowing a local authenticated malicious user to potentially elevate...

PT-2023-13371 · Dell · Dell Supportassist For Home Pcs +1

Name of the Vulnerable Software and Affected Versions: SupportAssist for Home PCs versions 3.11.4 and prior SupportAssist for Business PCs versions 3.2.0 and prior Description: The issue is related to a cryptographic weakness. An authenticated non-admin user could potentially exploit this weaknes...

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...

Dell SupportAssist < 3.11.4 Multiple Vulnerabilities

According to its self-reported version number, the version of Dell SupportAssist Client is affected by multiple vulnerabilities. - Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain information disclosure vulnerability. A...

Code injection

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an...

DELL Dell SupportAssist for Business PCs和Dell SupportAssist for Home PCs 代码问题漏洞

SupportAssist is a monitoring software with automatic fault detection and notification for Dell PCs and tablets. An arbitrary code execution vulnerability exists in Dell Patches SupportAssist. An attacker can exploit the vulnerability to execute arbitrary code with administrator privileges on an...

Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs code issue vulnerability

Dell SupportAssist for Business PCs is a client application for enterprise PCs. Dell SupportAssist for Home PCs is a client application for home PCs that provides automated, proactive and predictive techniques for troubleshooting and more. Dell SupportAssist for Home PCs and Dell SupportAssist fo...

Dell SupportAssist PC Doctor Vulnerability (DSA-2019-084)

Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version prior to 3.2.2 are affected by a security vulnerability within the PC Doctor component Uncontrolled Search Path Element before PC-Doctor Toolbox 7.3. C Tenable Network Security, Inc. include'compat.inc'; i...