7.8

CVE-2020-5316

Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 contain an uncontrolled search path vulnerability. A locally authenticated low privileged user could exploit this vulnerability to cause the loading of arbitrary DLLs by the SupportAssist binaries, resulting in the privileged execution of arbitrary code.

Data is provided by the National Vulnerability Database (NVD)
Dell ≫ Supportassist For Home Pcs Version2.0.1
Dell ≫ Supportassist For Home Pcs Version2.0.2
Dell ≫ Supportassist For Home Pcs Version2.1.1
Dell ≫ Supportassist For Home Pcs Version2.1.2
Dell ≫ Supportassist For Home Pcs Version2.1.3
Dell ≫ Supportassist For Home Pcs Version2.2.1
Dell ≫ Supportassist For Home Pcs Version2.2.2
Dell ≫ Supportassist For Home Pcs Version2.2.3
Dell ≫ Supportassist For Home Pcs Version3.0.1
Dell ≫ Supportassist For Home Pcs Version3.0.2
Dell ≫ Supportassist For Home Pcs Version3.2.1
Dell ≫ Supportassist For Home Pcs Version3.2.2
Dell ≫ Supportassist For Home Pcs Version3.3.1
Dell ≫ Supportassist For Home Pcs Version3.3.2
Dell ≫ Supportassist For Home Pcs Version3.3.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.294
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
security_alert@emc.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.