Advisories · Technology
Dell SupportAssist Client Consumer.
Every CVE that names Dell SupportAssist Client Consumer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the Support…
- Dell SupportAssist Client Consumer
- CWE-280
- CVSS 7.2 High
Improper privilege management in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Privilege escalation
- CVSS 7.3 High
Untrusted search path in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- CWE-426
- CVSS 5.5 Medium
Hard-coded cryptographic key in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Hard-coded credentials
- CVSS 5.5 Medium
Weak encryption in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Weak cryptography or TLS
- CVSS 7.8 High
Execution with unnecessary privileges in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Privilege escalation
- CVSS 6.5 Medium
Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability.
- Dell SupportAssist Client Consumer
- CWE-942
- CVSS 7.1 High
Path traversal in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Path traversal
- CVSS 7.8 High
Untrusted search path in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- CWE-426
- CVSS 7.1 High
Path traversal in Dell SupportAssist Client Consumer
- Dell SupportAssist Client Consumer
- Path traversal