Dell SupportAssist For Home PCS 3.11.4

CPE Details

Dell SupportAssist For Home PCS 3.11.4
dell
supportassist_for_home_pcs
3.11.4
2023-09-29
09h33 +00:00
2023-09-29
09h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:dell:supportassist_for_home_pcs:3.11.4:*:*:*:*:*:*:*

Informations

Vendor

dell

Product

supportassist_for_home_pcs

Version

3.11.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-52535 2024-12-25 14h41 +00:00 Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability, gaining privileges escalation, leading to arbitrary deletion of files and folders from the system.
8.8
High
CVE-2023-44283 2024-02-14 07h49 +00:00 In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.
7.8
High
CVE-2023-25535 2024-02-14 07h23 +00:00 Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023
7.2
High
CVE-2022-34392 2023-02-10 20h26 +00:00 SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that leads to reuse the access token and fetch sensitive information.
5.5
Medium
CVE-2022-34389 2023-02-10 20h23 +00:00 Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate dell customer to a dell support technician.
5.3
Medium
CVE-2022-34388 2023-02-10 20h18 +00:00 Dell SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low privileges could exploit this vulnerability to view and modify sensitive information in the database of the affected application.
7.1
High
CVE-2022-34387 2023-02-10 20h15 +00:00 Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated malicious user could potentially exploit this vulnerability to elevate privileges and gain total control of the system.
7.8
High
CVE-2022-34386 2023-02-10 20h11 +00:00 Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
5.5
Medium
CVE-2022-34385 2023-02-10 20h07 +00:00 SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
5.5
Medium