3.7
Low
CVE-2022-34389 Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component
Description
Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate dell customer to a dell support technician.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SupportAssist | Versions not published |
Other CVEs of SupportAssist
The 4 CVEs of SupportAssist →
CVE-2022-34392
SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability
5.5
Medium
CVE-2022-34388
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)…
7.1
High
CVE-2022-34387
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)…
6.4
Medium