[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-34389":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":25,"references":28,"score":30,"epss_score":31,"epss_percentile":32,"is_kev":33,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":45,"exploits":92},297303,"CVE-2022-34389","EUVD-2022-37344","\nDell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate dell customer to a dell support technician.\n\n\n\n\n\n","2023-02-11T01:23:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":18},"UNCHANGED","3.1",5.3,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","NONE","LOW",true,[21],"CWE-307",[23,24],"cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*","cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*",[26,27],"Dell Supportassist For Home Pcs","Dell Supportassist For Business Pcs",[29],"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Fkbdoc\u002F000204114",0.47,0.00442,0.38115,false,null,{"timestamp":36,"automatable":37,"tech_impact":38,"exploitation":39,"cisa_decision":40,"cisa_remediation_timeline":44},"2025-03-24T15:06:48.113021Z","no","partial","none",{"vector":41,"decision":42,"priority":43},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:36:36.061518\u002F","track_star","medium","60D",[46,52,63,71,78,85],{"name":47,"source":48,"tactics":49,"technique_id":51},"Exploit Public-Facing Application","attack_vector",[50],"initial-access","T1190",{"name":53,"source":54,"cwe_ids":55,"tactics":56,"capec_ids":60,"technique_id":62},"Valid Accounts","capec",[21],[50,57,58,59],"persistence","privilege-escalation","stealth",[61],"CAPEC-560","T1078",{"name":64,"source":54,"cwe_ids":65,"tactics":66,"capec_ids":68,"technique_id":70},"Password Guessing",[21],[67],"credential-access",[69],"CAPEC-49","T1110.001",{"name":72,"source":54,"cwe_ids":73,"tactics":74,"capec_ids":75,"technique_id":77},"Password Spraying",[21],[67],[76],"CAPEC-565","T1110.003",{"name":79,"source":54,"cwe_ids":80,"tactics":81,"capec_ids":82,"technique_id":84},"Credential Stuffing",[21],[67],[83],"CAPEC-600","T1110.004",{"name":86,"source":54,"cwe_ids":87,"tactics":88,"capec_ids":89,"technique_id":91},"Steal or Forge Kerberos Tickets",[21],[67],[90],"CAPEC-652","T1558",[]]