Lucene search
K

9 matches found

CNNVD
CNNVD
β€’added 2023/12/22 12:0 a.m.β€’2 views

Dell SupportAssist for Home PCs Code Issue Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.14.1 and prior versions, which...

7.8CVSS7.5AI score0.0004EPSS
Exploits0References2
CNVD
CNVD
β€’added 2022/09/30 12:0 a.m.β€’16 views

Dell SmartFabric OS10 Trust Management Issue Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL. A security vulnerability exists in Support Assist in Dell Networking OS10 version 10.5.3.4. An unauthenticated, remote attacker could exploit this vulnerability to access limited switch configuration data and...

3.7CVSS4.2AI score0.00114EPSS
Exploits0References1
NVD
NVD
β€’added 2022/09/28 9:15 p.m.β€’11 views

CVE-2022-34394

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

3.7CVSS0.00114EPSS
Exploits0References1
OSV
OSV
β€’added 2022/09/28 9:15 p.m.β€’1 views

CVE-2022-34394

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

3.7CVSS5.8AI score0.00114EPSS
Exploits0References1
Prion
Prion
β€’added 2022/09/28 9:15 p.m.β€’15 views

Input validation

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by...

2.6CVSS4.6AI score0.00114EPSS
Exploits0References1Affected Software1
CVE
CVE
β€’added 2022/09/28 8:30 p.m.β€’57 views

CVE-2022-34394

Dell OS10 (version 10.5.3.4) contains an Improper Certificate Validation vulnerability in the Support Assist component. A remote unauthenticated attacker could perform a man‑in‑the‑middle to access limited switch configuration data. The root cause is TLS certificate validation failure within Supp...

3.7CVSS4.5AI score0.00114EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
β€’added 2022/06/23 12:0 a.m.β€’4 views

PT-2022-4980 Β· Dell Β· Dell Os10

Name of the Vulnerable Software and Affected Versions: Dell OS10 version 10.5.3.4 Description: The issue is related to an Improper Certificate Validation vulnerability in the Support Assist component. This could allow a remote unauthenticated attacker to exploit the vulnerability, leading to...

3.7CVSS4.1AI score0.00114EPSS
Exploits0References4
CVE
CVE
β€’added 2022/05/26 3:20 p.m.β€’63 views

CVE-2022-26865

Dell SupportAssist OS Recovery is affected by an Authentication Bypass in versions before 5.5.2. An unauthenticated attacker with physical access can bypass OS Recovery authentication and run arbitrary code as Administrator. Root cause: bypass of OS Recovery authentication. Impact: full administr...

7.2CVSS6.8AI score0.00058EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
β€’added 2022/05/26 3:20 p.m.β€’11 views

CVE-2022-26865

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator...

6.8CVSS7AI score0.00058EPSS
Exploits0References1
Rows per page
Query Builder