Uncontrolled search path in Dell SupportAssist Client
Priority LOW 34CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-427.
Summary
Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an uncontrolled search path vulnerability. A locally authenticated low privileged user could exploit this vulnerability to cause the loading of arbitrary DLLs by the SupportAssist binaries, resulting in the privileged execution of arbitrary code.
Why it matters now
EPSS 0.00294 22nd percentileScored 2026-11-07
Fix Fixed Dell SupportAssist Client (Dell): Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | Dell SupportAssist Client | before Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1 | Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1 | Patch available | CNA |
- Dell SupportAssist Client VendorDell Affected before Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1 Fixed in Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1 Patch available CNA
CPE configurations NVD · 30
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.2:*:*:*:*:*:*:* | 2.1.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.3:*:*:*:*:*:*:* | 2.1.3 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Dell |
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Dell
Show 20 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.2:*:*:*:*:*:*:* | 2.1.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.3:*:*:*:*:*:*:* | 2.1.3 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Dell |
| cpe:2.3:a:dell:supportassist_for_home_pcs:3.4:*:*:*:*:*:*:* | 3.4 | Vulnerable | Dell |
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Dell
- cpe:2.3:a:dell:supportassist_for_home_pcs:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Dell
Remediation
- Fix · CNA Dell SupportAssist Client (Dell) Fixed in Dell SupportAssist for Business PCs version 2.1.4 and Dell SupportAssist for Home PCs version 3.4.1
Timeline
- 2026-10-02 Threatist record created from CVE-2020-5316
- 2026-10-03 Alias added: GHSA-47v2-m4w2-vxpg
References
More Dell Supportassist For Business Pcs vulnerabilities
- TI-2022-11646 Cross-site scripting in Dell SupportAssist Consumer CVSS 3.1CRITICAL 9.6
- TI-2024-35205 Link following in Dell SupportAssist for Home PCs CVSS 3.1HIGH 8.8
- TI-2019-09165 PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. CVSS 3.0HIGH 7.8
- TI-2023-23805 Improper access control in Dell SupportAssist for Home PCs CVSS 3.1HIGH 7.8
- TI-2022-15283 Improper privilege management in Dell SupportAssist Client Consumer CVSS 3.1HIGH 7.8
- TI-2025-24916 SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect… CVSS 3.1HIGH 7.8
Sources
- CVE-2020-5316 · CVE Program
- CVE-2020-5316 · NVD
- FIRST EPSS
- GHSA-47v2-m4w2-vxpg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences