CVE-2023-48670CWE-426

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer

High · published December 22, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2023-12-22T15:57Z
EPSS history
Timeline
  • 22 DEC 15:57Z
    Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer
    cvelistv5