CVEvulnerability

CVE-2022-34394

3.7 LOW Published 2022-09-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-295

Description

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by attackers to conduct man-in-the-middle attacks to gain access to the Support Assist information.

Affected configurations

• dell smartfabric os10 10.5.3.4

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References