7.8
High
CVE-2021-36297 SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load…
Description
SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing arbitrary dll's,
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SupportAssist Client Consumer | Versions not published |
Other CVEs of SupportAssist Client Consumer
The 10 CVEs of SupportAssist Client Consumer →
CVE-2023-39249
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows…
6.3
Medium
CVE-2023-25535
Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a…
7.2
High
CVE-2023-48670
Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the…
7.3
High
CVE-2022-34386
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and…
5.5
Medium