GCVE - cpe:2.3:a:dell:supportassist:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:supportassist:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Supportassist (`08e13e6e-c4b9-5d23-8053-7bf31fe63114`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34392`	vulnerable	2026-06-08 05:44:52.865761	Details available MEDIUM (5.5) SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information. Published: 2023-02-10T20:26:21.460Z Updated: 2025-03-26T15:19:54.301Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000204114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34389`	vulnerable	2026-06-08 05:44:52.860757	Details available LOW (3.7) Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate dell customer to a dell support technician. Published: 2023-02-10T20:23:06.581Z Updated: 2025-03-26T15:20:18.440Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000204114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34388`	vulnerable	2026-06-08 05:44:52.860368	Details available HIGH (7.1) Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerability to view and modify sensitive information in the database of the affected application. Published: 2023-02-10T20:18:33.273Z Updated: 2025-03-26T15:30:36.428Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000204114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34387`	vulnerable	2026-06-08 05:44:52.859854	Details available MEDIUM (6.4) Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the system. Published: 2023-02-10T20:15:01.905Z Updated: 2025-03-26T15:33:02.884Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/000204114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3719`	vulnerable	2026-06-08 05:13:55.745409	Details available HIGH (7.1) Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites. Published: 2019-04-18T19:58:22.916Z Updated: 2024-09-16T18:40:02.152Z Open on db.gcve.eu Reference links https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3718`	vulnerable	2026-06-08 05:13:55.744924	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.