PT-2024-13185 · Microsoft+1 · Windows+2

Published 2024-02-14 · Updated 2024-10-17 · CVE-2023-44283

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SupportAssist for Home PCs versions 3.0 through 3.14.1 Dell SupportAssist for Business PCs versions 3.0 through 3.4.1

Description A security concern has been identified in Dell SupportAssist, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code in the Windows system context, confined to that specific local PC.

Recommendations For Dell SupportAssist for Home PCs versions 3.0 through 3.14.1, update to a version outside of this range to mitigate the risk. For Dell SupportAssist for Business PCs versions 3.0 through 3.4.1, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-44283

Affected Products

Dell Supportassist For Business Pcs

Dell Supportassist For Home Pcs

Windows

References · 7

• https://osv.dev/vulnerability/CVE-2023-44283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44283 · Security Note
• https://dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component · Vendor Advisory
• https://t.me/cvenotify/98488 · Telegram Post
• https://twitter.com/CVEnew/status/1757680775552520349 · Twitter Post
• https://twitter.com/cracbot/status/1758008282613190840 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1757732582131642381 · Twitter Post