CVE-2022-34394

Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by attackers to conduct man-in-the-middle attacks to gain access to the Support Assist information.

• CWE-295
• CWE-295

• https://www.dell.com/support/kbdoc/en-us/000202974/dsa-2022-293-dell-networking-os10-security-update-for-a-support-assist-vulnerabilityVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000202974/dsa-2022-293-dell-networking-os10-security-update-for-a-support-assist-vulnerabilityVendor Advisory

Published

Sep 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34389 Dell SupportAssist contains a rate limit bypass issues in s…5.3
• CVE-2022-3439Allocation of Resources Without Limits or Throttling in GitH…9.8
• CVE-2022-34390Dell BIOS contains a use of uninitialized variable vulnerabi…7.8
• CVE-2022-34391Dell Client BIOS Versions prior to the remediated version co…7.8
• CVE-2022-34392 SupportAssist for Home PCs (versions 3.11.4 and prior) cont…5.5
• CVE-2022-34393 Dell BIOS contains an improper input validation vulnerabili…7.5
• CVE-2022-34395Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-34396 Dell OpenManage Server Administrator (OMSA) version 10.3.0.…7.8
• CVE-2022-34397 Dell Unisphere for PowerMax vApp, VASA Provider vApp, and S…5.7
• CVE-2022-34398 Dell BIOS contains a Time-of-check Time-of-use vulnerabilit…7
• CVE-2022-34399 Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a…2.3
• CVE-2022-3440The Rock Convert WordPress plugin before 2.11.0 does not san…6.1