CVE-2023-44283

High

Description

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

SeverityHigh

CVSS7.8

Exploit probability—

ProductDell Supportassist For Business Pcs

PublishedFeb 14, 2024

First seenFeb 14, 2024

Weakness typeCWE-284Improper access control

How to fix

Update

dell supportassist_for_business_pcs3.5.0 or later
dell supportassist_for_home_pcs3.14.2 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component

Affected products

Product	Affected versions	Fixed in
dell supportassist_for_business_pcs	3.0 ≤ v < 3.5.0	3.5.0
dell supportassist_for_home_pcs	3.0 ≤ v < 3.14.2	3.14.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.