CVE-2022-34384

Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dell:alienware_update:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:command_update:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:update:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:09

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/000204114 - Vendor Advisory () https://www.dell.com/support/kbdoc/000204114 - Vendor Advisory

07 Nov 2023, 03:48

Type Values Removed Values Added
Summary Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation. Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation.

Information

Published : 2023-02-11 01:23

Updated : 2024-11-21 07:09


NVD link : CVE-2022-34384

Mitre link : CVE-2022-34384

CVE.ORG link : CVE-2022-34384


JSON object : View

Products Affected

dell

  • supportassist_for_business_pcs
  • update
  • supportassist_for_home_pcs
  • command_update
  • alienware_update
CWE
CWE-250

Execution with Unnecessary Privileges

CWE-269

Improper Privilege Management