Lucene search

DellCVE-2023-44283

HistoryFeb 14, 2024 - 8:15 a.m.

CVE-2023-44283

2024-02-1408:15:09

CWE-284

dell

web.nvd.nist.gov

cve-2023-44283

dell supportassist

home pcs

business pcs

security concern

privilege escalation

arbitrary code

windows system context

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

Affected configurations

Vulners

Vulnrichment

Node

dellsupportassist_for_home_pcsRange≤3.14.1

dellsupportassist_for_business_pcsRange≤3.4.1

VendorProductVersionCPE
dellsupportassist_for_home_pcs*cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*
dellsupportassist_for_business_pcs*cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	supportassist_for_home_pcs	*	cpe:2.3:a:dell:supportassist_for_home_pcs::::::::
dell	supportassist_for_business_pcs	*	cpe:2.3:a:dell:supportassist_for_business_pcs::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SupportAssist for Home PCs",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "3.14.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "SupportAssist for Business PCs",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "3.4.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-44283