Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-11517
HistoryFeb 22, 2024 - 12:00 a.m.

Dell SupportAssist for Home PCs Elevation of Privilege Vulnerability

2024-02-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
dell
supportassist
home pcs
elevation of privilege
vulnerability
dell usa
automated
proactive
predictive
troubleshooting
local privilege escalation

7.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

3.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.0%

Dell SupportAssist for Home PCs is a client application for home computers from Dell (USA). The program provides automated, proactive and predictive techniques for troubleshooting and more. An elevation of privilege vulnerability exists in versions prior to Dell SupportAssist for Home PCs 3.13.2.19, which can be exploited by an attacker to cause a local privilege escalation.

7.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

3.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.0%

Related for CNVD-2024-11517