Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Supportassist For Business Pcs · all components

Priority MEDIUM 44

Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01254 Published 2022-06-10 No fix listed CWE-16
Priority MEDIUM 41

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00551 Published 2024-12-25 Fixed in 4.6.2, 4.5.1 CWE-61
Priority LOW 36

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respectiv…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2024-02-14 No fix listed CWE-284
Priority LOW 36

Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, and Alienware Update versions before 4.5 contain a Local Privile…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0023 Published 2023-02-10 No fix listed CWE-250
Priority LOW 35

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00153 Published 2023-02-10 No fix listed CWE-377
Priority LOW 34

Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versions prior) contain a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0036 Published 2022-06-10 No fix listed CWE-427
Priority LOW 34

Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x contain a DLL injection…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00352 Published 2021-03-12 Fixed in SACH 3.8, SACB 2.3 CWE-427
Priority LOW 34

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00294 Published 2021-07-22 Fixed in Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1 CWE-427
Priority LOW 34

Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2019-06-20 No fix listed CWE-269
Priority LOW 31

Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion/overwrite vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00251 Published 2022-06-10 No fix listed CWE-22
Priority LOW 31

Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00251 Published 2022-06-10 No fix listed CWE-22
Priority LOW 30

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0016 Published 2023-02-10 No fix listed CWE-318
Priority LOW 24

Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00442 Published 2023-02-10 No fix listed CWE-307
Priority LOW 24

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00166 Published 2023-02-10 No fix listed CWE-321
Open these records in search →