5.5
CVE-2022-34385
- EPSS 0.13%
- Veröffentlicht 11.02.2023 01:23:23
- Zuletzt bearbeitet 21.11.2024 07:09:24
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginSupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Supportassist For Business Pcs Version <= 3.2.0
Dell ≫ Supportassist For Home Pcs Version <= 3.11.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.027 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| security_alert@emc.com | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://www.dell.com/support/kbdoc/000204114