Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2022-22564 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Dell products
Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm.
network
high complexity
dell CWE-327
5.9
2023-02-13 CVE-2022-34397 Unspecified vulnerability in Dell products
Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5 and below contains an authorization bypass vulnerability, allowing users to perform actions in which they are not authorized.
low complexity
dell
5.7
2023-02-13 CVE-2023-23697 Link Following vulnerability in Dell Command | Intel Vpro OUT of Band
Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.
local
low complexity
dell CWE-59
3.3
2023-02-13 CVE-2023-24572 Link Following vulnerability in Dell Command | Integration Suite for System Center 6.2.0
Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation.
local
low complexity
dell CWE-59
3.3
2023-02-11 CVE-2022-34384 Improper Privilege Management vulnerability in Dell products
Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component.
local
low complexity
dell CWE-269
7.8
2023-02-11 CVE-2022-34385 Inadequate Encryption Strength vulnerability in Dell products
SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability.
local
low complexity
dell CWE-326
5.5
2023-02-11 CVE-2022-34386 Use of Hard-coded Credentials vulnerability in Dell products
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability.
local
low complexity
dell CWE-798
5.5
2023-02-11 CVE-2022-34387 Exposure of Resource to Wrong Sphere vulnerability in Dell products
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability.
local
low complexity
dell CWE-668
7.8
2023-02-11 CVE-2022-34388 Cleartext Storage of Sensitive Information vulnerability in Dell products
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability.
local
low complexity
dell CWE-312
7.1
2023-02-11 CVE-2022-34389 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell products
Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component.
network
low complexity
dell CWE-307
5.3