HIGH · 7.8

CVE-2023-44283

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated use...

Vulnerability Description

In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DellSupportassist For Business Pcs>= 3.0, < 3.5.0
DellSupportassist For Home Pcs>= 3.0, < 3.14.2

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-44283?

CVE-2023-44283 is a vulnerability with a CVSS score of 7.8 (HIGH). In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated use...

How severe is CVE-2023-44283?

CVE-2023-44283 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-44283?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Supportassist For Business Pcs, Dell Supportassist For Home Pcs.