7.8
CVE-2023-44283
- EPSS 0.07%
- Veröffentlicht 14.02.2024 08:15:09
- Zuletzt bearbeitet 21.11.2024 08:25:35
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Supportassist For Business Pcs Version >= 3.0 < 3.5.0
Dell ≫ Supportassist For Home Pcs Version >= 3.0 < 3.14.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.209 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| security_alert@emc.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.