CVE-2019-3719

Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability

High · published April 18, 2019

CVSS v3.0
7.1
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.16272 · 96.9th percentile
Published
2019-04-18T19:58Z
EPSS history
Timeline
  • 18 APR 19:58Z
    Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability
    cvelistv5