CVE Feed

    Dashboard / CVE / CVE-2022-34392

    CVE-2022-34392

    SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information.

    Published:Feb 10, 2023
    Last Modified:Mar 26, 2025
    EPS:Feb 10, 2023
    EPSS Score:0.00065
    CVSS Score:5.5

    Affected Products

    Vendor
    Dell
    Product
    Supportassist For Home Pcs

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-613 Insufficient Session Expiration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-43991 (CVSS 6.3) — SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prio…
    CVE-2025-36613 (CVSS 2.8) — SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prio…
    CVE-2025-38738 (CVSS 6.7) — SupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an Incorrect Privilege A…
    CVE-2024-52535 (CVSS 7.1) — Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.…
    CVE-2024-38305 (CVSS 7.3) — Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in t…
    CVE-2023-44283 (CVSS 7.8) — In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.…
    CVE-2023-39249 (CVSS 6.3) — Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that a…
    CVE-2023-25535 (CVSS 7.2) — Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial install…
    CVE-2023-48670 (CVSS 7.3) — Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerabilit…
    CVE-2022-34389 (CVSS 3.7) — Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High