CVE-2022-34389

Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate dell customer to a dell support technician.
References
Link Resource
https://www.dell.com/support/kbdoc/000204114 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*

Information

Published : 2023-02-11 01:23

Updated : 2023-02-21 05:26


NVD link : CVE-2022-34389

Mitre link : CVE-2022-34389

Products Affected
No products.
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts