Vulnerabilities > CVE-2023-25535 - Unspecified vulnerability in Dell Supportassist for Home PCS

CVSS 6.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

dell

NVD

Published: 2024-02-14

Updated: 2024-10-17

Summary

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023

Vulnerable Configurations

Part	Description	Count
Application	Dell Dell Supportassist FOR Home PCS - Dell Supportassist FOR Home PCS 2.0 Dell Supportassist FOR Home PCS 2.0.1 Dell Supportassist FOR Home PCS 2.0.2 Dell Supportassist FOR Home PCS 2.1 Dell Supportassist FOR Home PCS 2.1.1 Dell Supportassist FOR Home PCS 2.1.2 Dell Supportassist FOR Home PCS 2.1.3 Dell Supportassist FOR Home PCS 2.2 Dell Supportassist FOR Home PCS 2.2.1 Dell Supportassist FOR Home PCS 2.2.2 Dell Supportassist FOR Home PCS 2.2.3 Dell Supportassist FOR Home PCS 3.0 Dell Supportassist FOR Home PCS 3.0.1 Dell Supportassist FOR Home PCS 3.0.2 Dell Supportassist FOR Home PCS 3.1 Dell Supportassist FOR Home PCS 3.2 Dell Supportassist FOR Home PCS 3.2.1 Dell Supportassist FOR Home PCS 3.2.2 Dell Supportassist FOR Home PCS 3.3 Dell Supportassist FOR Home PCS 3.3.1 Dell Supportassist FOR Home PCS 3.3.2 Dell Supportassist FOR Home PCS 3.3.3 Dell Supportassist FOR Home PCS 3.4 Dell Supportassist FOR Home PCS 3.4.0 Dell Supportassist FOR Home PCS 3.5.0 Dell Supportassist FOR Home PCS 3.6.0 Dell Supportassist FOR Home PCS 3.7.0 Dell Supportassist FOR Home PCS 3.8.0 Dell Supportassist FOR Home PCS 3.9.0 Dell Supportassist FOR Home PCS 3.10.4 Dell Supportassist FOR Home PCS 3.11.2 Dell Supportassist FOR Home PCS 3.11.4 Dell Supportassist FOR Home PCS 3.12.3	34

References

https://www.dell.com/support/kbdoc/en-us/000211410/dell-supportassist-for-home-pcs-security-update-for-installer-executable-file-for-local-privilege-escalation-lpe-vulnerability