Filtered by vendor Dell Subscriptions
Filtered by product Supportassist Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-22480 1 Dell 1 Supportassist 2025-02-18 7 High
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.
CVE-2019-3719 1 Dell 1 Supportassist 2024-11-21 8.0 High
Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.
CVE-2019-3718 1 Dell 1 Supportassist 2024-11-21 8.8 High
Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.