CVE-2019-3718

CVE-2019-3718 affects Dell SupportAssist Client prior to version 3.2.0.90, where an improper origin validation vulnerability could allow an unauthenticated remote attacker to attempt CSRF attacks on users of the impacted systems. Public sources in the connected documents consistently describe CSR...

CVE-2019-3719

Dell SupportAssist Client, before version 3.2.0.90, contains a remote code execution vulnerability (CVE-2019-3719). An unauthenticated attacker on the same network can coerce a victim to download and execute arbitrary executables via the SupportAssist client hosted on attacker sites. The issue ar...