Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-50821

A vulnerability has been identified in SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC04, SIMATIC WinCC Runtime Professional V17 All versions V17 Update 8, SIMATIC WinCC Runtime Professional V18 All versions V18 Update 4, SIMATIC WinCC Runtime Professional V19 All versions V19 Update 1, SIMATIC WinCC...

Siemens SIMATIC WinCC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Amazon Linux 2 : pcs (ALAS-2024-2492)

The version of pcs installed on the remote host is prior to 0.9.169-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2492 advisory. A Denial of Service DoS vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content typ...

Dell SupportAssist for Home PCs Elevation of Privilege Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An elevation of privilege vulnerability exists in versions prior to Dell SupportAssist for Home PCs 3.13.2.19...

Dell SupportAssist for Home PCs Access Control Error Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An access control error vulnerability exists in Dell SupportAssist for Home PCs that could lead to privilege...

Dell SupportAssist for Business PCs Local Authentication Bypass Vulnerability

Dell SupportAssist for Business PCs is a client application for business computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A local authentication bypass vulnerability exists in Dell SupportAssist for Business PCs version...

Multiple Siemens Products Null Pointer Dereference Vulnerability (CNVD-2024-09314)

SIMATIC PCS 7 is a centralized control system DCS that integrates components such as SIMATIC WinCC, SIMATIC Batch, SIMATIC Route control, OpenPCS 7, etc. SIMATIC WinCC is a Supervisory Control and Data Acquisition SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-39249

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables...

CVE-2023-25535

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation LPE. This vulnerability only affects first-time installations done prior to 8th March 2023...

Authentication flaw

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-44283

Dell SupportAssist for Home PCs (versions 3.0–3.14.1) and Dell SupportAssist for Business PCs (versions 3.0–3.4.1) are affected. The vulnerability, affecting locally authenticated users, could allow privilege escalation and arbitrary code execution in the Windows system context on the local PC. T...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-39249

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables...

CVE-2023-39249

CVE-2023-39249 affects Dell SupportAssist for Business PCs ver. 3.4.0. The issue is a local authentication bypass that lets locally authenticated non-admin users obtain temporary privilege within the SupportAssist UI via the Run as Admin feature; the privilege is limited to the UI and expires aft...

CVE-2023-25535

The CVE-2023-25535 entry describes a local privilege escalation in Dell SupportAssist for Home PCs Installer Executable prior to version 3.13.2.19 used during initial installation, affecting first-time installs before 8 March 2023. Affected software/version: Dell SupportAssist for Home PCs Instal...

PT-2024-12785 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Business PCs version 3.4.0 Description: The issue allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary...

PT-2024-12065 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs Installer Executable versions prior to 3.13.2.19 Description: The issue affects the initial installation of Dell SupportAssist for Home PCs and can result in local privilege escalation LPE. This vulnerability...