Vulnerability Description
Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Supportassist | < 3.2.0.90 |
References
- https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supporPatchVendor Advisory
- https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supporPatchVendor Advisory
FAQ
What is CVE-2019-3719?
CVE-2019-3719 is a vulnerability with a CVSS score of 8.0 (HIGH). Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compro...
How severe is CVE-2019-3719?
CVE-2019-3719 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3719?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Supportassist.