Vulnerabilities fixed in Dell SupportAssistant

Vulnerabilities have been fixed in Dell SupportAssist. The vulnerabilities allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Remote code execution User Rights Access to system data Increased...

Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial arbitrary file deletion/overwrite vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial are vulnerable to an arbitrary file deletion/overwrite...

Dell SupportAssist Client Cross-Site Scripting Vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive technologies for troubleshooting and more. A cross-site scripting vulnerability exists in Dell SupportAssist Client Consumer 3.10.4 and earlier and Dell SupportAssist Client...

Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial Arbitrary File Deletion Vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial are vulnerable to arbitrary file deletion, which could be...

Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial Code Issue Vulnerability

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. The Dell SupportAssist Client Consumer and Dell SupportAssist Client Commercial code issue vulnerability could be exploited by an attacker...

CVE-2022-29092

Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...

CVE-2022-29093

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system...

CVE-2022-29094

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issue and delete or overwrite arbitrary files...

CVE-2022-29094

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issue and delete or overwrite arbitrary files...

CVE-2022-29095

Dell SupportAssist Client Consumer versions 3.10.4 and prior and Dell SupportAssist Client Commercial versions 3.1.1 and prior contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to...

CVE-2022-29093

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system...

CVE-2022-29092

Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...

CVE-2022-29095

Dell SupportAssist Client Consumer versions 3.10.4 and prior and Dell SupportAssist Client Commercial versions 3.1.1 and prior contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to...

Privilege escalation

Dell SupportAssist Client Consumer versions 3.11.0 and versions prior and Dell SupportAssist Client Commercial versions 3.2.0 and versions prior contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin access to the system...

Arbitrary file deletion

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issue and delete or overwrite arbitrary files...

Arbitrary file deletion

Dell SupportAssist Client Consumer versions 3.10.4 and versions prior and Dell SupportAssist Client Commercial versions 3.1.1 and versions prior contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and delete arbitrary files on the system...

Cross site scripting

Dell SupportAssist Client Consumer versions 3.10.4 and prior and Dell SupportAssist Client Commercial versions 3.1.1 and prior contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to...

CVE-2022-29095

Dell SupportAssist Client contains a Cross-Site Scripting (XSS) vulnerability (CVE-2022-29095) in both Consumer (3.10.4 and earlier) and Commercial (3.1.1 and earlier) versions. A remote unauthenticated attacker could exploit this (under specific conditions) to execute malicious code on the targe...

CVE-2022-29095

Dell SupportAssist Client Consumer versions 3.10.4 and prior and Dell SupportAssist Client Commercial versions 3.1.1 and prior contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to...

CVE-2022-29094

Dell SupportAssist Client (Consumer 3.10.4 and earlier; Commercial 3.1.1 and earlier) contains an arbitrary file deletion/overwrite vulnerability. An authenticated non‑admin user can delete or overwrite arbitrary files on the system. The issue is documented as CVE-2022-29094; CVSS data in the pro...