CVE-2022-34384: High severity dell update vulnerability
Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user may potentially exploit this vulnerability, leading to privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Dell SupportAssist vulnerability?
The vulnerability ID for this Dell SupportAssist vulnerability is CVE-2022-34384.
What is the severity rating of CVE-2022-34384?
The severity rating of CVE-2022-34384 is high.
Which software versions are affected by this vulnerability?
The Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 are affected by this vulnerability.
What does the vulnerability involve?
The vulnerability involves a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component.
How can I fix this vulnerability?
To fix this vulnerability, you should update to Dell SupportAssist Client Consumer version 3.11.2 or later, SupportAssist Client Commercial version 3.2.1 or later, Dell Command | Update version 4.5.1 or later, Dell Update version 4.5.1 or later, or Alienware Update version 4.5.1 or later.