Vulnerability Description
Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Supportassist For Business Pcs | <= 3.1.1 |
| Dell | Supportassist For Home Pcs | <= 3.10.4 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000200456/dsa-2022-139-dell-supportassiMitigationVendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000200456/dsa-2022-139-dell-supportassiMitigationVendor Advisory
FAQ
What is CVE-2022-29093?
CVE-2022-29093 is a vulnerability with a CVSS score of 7.1 (HIGH). Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. A...
How severe is CVE-2022-29093?
CVE-2022-29093 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29093?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Supportassist For Business Pcs, Dell Supportassist For Home Pcs.