Vulnerabilities > CVE-2023-44283 - Unspecified vulnerability in Dell products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

dell

NVD

Published: 2024-02-14

Updated: 2024-10-17

Summary

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

Vulnerable Configurations

Part	Description	Count
Application	Dell Dell Supportassist FOR Home PCS 3.0 Dell Supportassist FOR Home PCS 3.0.1 Dell Supportassist FOR Home PCS 3.0.2 Dell Supportassist FOR Home PCS 3.1 Dell Supportassist FOR Home PCS 3.2 Dell Supportassist FOR Home PCS 3.2.1 Dell Supportassist FOR Home PCS 3.2.2 Dell Supportassist FOR Home PCS 3.3 Dell Supportassist FOR Home PCS 3.3.1 Dell Supportassist FOR Home PCS 3.3.2 Dell Supportassist FOR Home PCS 3.3.3 Dell Supportassist FOR Home PCS 3.4 Dell Supportassist FOR Home PCS 3.4.0 Dell Supportassist FOR Home PCS 3.5.0 Dell Supportassist FOR Home PCS 3.6.0 Dell Supportassist FOR Home PCS 3.7.0 Dell Supportassist FOR Home PCS 3.8.0 Dell Supportassist FOR Home PCS 3.9.0 Dell Supportassist FOR Home PCS 3.10.4 Dell Supportassist FOR Home PCS 3.11.2 Dell Supportassist FOR Home PCS 3.11.4 Dell Supportassist FOR Home PCS 3.12.3 Dell Supportassist FOR Business PCS 3.1.1 Dell Supportassist FOR Business PCS 3.2.0 Dell Supportassist FOR Business PCS 3.3.0	25

References

https://www.dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component