CVE-2022-34384
First published: Fri Feb 10 2023(Updated: )
Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Alienware Update | <4.5.0 | |
| Dell Command Update | <4.5.0 | |
| Dell SupportAssist for Business PCs | <=3.2.0 | |
| Dell SupportAssist for Home PCs | <=3.11.2 | |
| Dell Update | <4.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Dell SupportAssist vulnerability?
The vulnerability ID for this Dell SupportAssist vulnerability is CVE-2022-34384.
What is the severity rating of CVE-2022-34384?
The severity rating of CVE-2022-34384 is high.
Which software versions are affected by this vulnerability?
The Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 are affected by this vulnerability.
What does the vulnerability involve?
The vulnerability involves a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component.
How can I fix this vulnerability?
To fix this vulnerability, you should update to Dell SupportAssist Client Consumer version 3.11.2 or later, SupportAssist Client Commercial version 3.2.1 or later, Dell Command | Update version 4.5.1 or later, Dell Update version 4.5.1 or later, or Alienware Update version 4.5.1 or later.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/dell
- canonical/dell alienware update
- canonical/dell command update
- canonical/dell supportassist for business pcs
- version/dell supportassist for business pcs/3.2.0
- canonical/dell supportassist for home pcs
- version/dell supportassist for home pcs/3.11.2
- canonical/dell update