CVE-2022-29093 in SupportAssist Client Consumer
Summary
by MITRE • 06/11/2022
Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 05/05/2026
The vulnerability identified as CVE-2022-29093 represents a critical arbitrary file deletion flaw within Dell SupportAssist client software across both consumer and commercial variants. This issue affects versions 3.10.4 and earlier for consumer editions, as well as version 3.1.1 and earlier for commercial editions, creating a significant security risk for systems running these software components. The vulnerability stems from insufficient input validation and inadequate access controls within the file management functions of the SupportAssist client, allowing authenticated users to manipulate file deletion operations beyond their intended scope.
The technical implementation of this vulnerability involves a privilege escalation path where non-administrative users can leverage the client application's file deletion functionality to remove arbitrary files from the system. This flaw operates at the operating system level and demonstrates poor security design principles, specifically violating the principle of least privilege and proper access control mechanisms. The vulnerability is classified under CWE-22 as "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", which directly relates to the ability of an attacker to manipulate file paths and delete files outside of intended directories. The flaw essentially allows an authenticated user to bypass normal file system permissions and execute destructive operations that should typically require administrative privileges.
From an operational impact perspective, this vulnerability creates substantial risk for enterprise environments where Dell SupportAssist clients are deployed across multiple endpoints. An attacker with low-privilege access could potentially delete critical system files, configuration data, or user documents, leading to system instability, data loss, and service disruption. The attack vector is particularly concerning because it requires only authentication to the system, making it accessible to anyone with legitimate user credentials who may not have administrative rights. This vulnerability aligns with ATT&CK technique T1070.004 "File Deletion" and represents a significant escalation path that could enable further compromise of the affected systems. The impact extends beyond immediate file deletion to potential system corruption and business continuity disruption.
Mitigation strategies for CVE-2022-29093 should prioritize immediate software updates to the latest versions of Dell SupportAssist client where the vulnerability has been patched. Organizations should implement network segmentation and access controls to limit user access to systems running the vulnerable software. Security teams should monitor for suspicious file deletion activities and implement file integrity monitoring solutions to detect unauthorized file removal operations. Additionally, privileged access management controls should be enforced to ensure that only authorized administrative users can access systems with vulnerable software components. The vulnerability highlights the importance of proper software security testing and code review processes, particularly for applications that handle file system operations with elevated privileges. Organizations should also consider disabling the affected client software components until proper patches are deployed and validated in their environments.