Lucene search

K
vulnrichmentDellVULNRICHMENT:CVE-2023-44283
HistoryFeb 14, 2024 - 7:49 a.m.

CVE-2023-44283

2024-02-1407:49:13
CWE-284
dell
github.com
3
dell
supportassist
security concern
home pcs
business pcs
privilege escalation
arbitrary code
windows system context.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dell",
    "product": "supportassist_for_home_pcs",
    "versions": [
      {
        "status": "affected",
        "version": "3.0",
        "versionType": "semver",
        "lessThanOrEqual": "3.14.1"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dell",
    "product": "supportassist_for_business_pcs",
    "versions": [
      {
        "status": "affected",
        "version": "3.0",
        "versionType": "semver",
        "lessThanOrEqual": "3.4.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-44283