CVE-2023-39249

Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.

• CWE-280

• https://www.dell.com/support/kbdoc/en-us/000216574/security-update-for-dell-supportassist-for-business-pcs-vulnerabilityVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000216574/security-update-for-dell-supportassist-for-business-pcs-vulnerabilityVendor Advisory

Published

Feb 14, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39239 It is identified a format string vulnerability in ASUS RT-A…7.2
• CVE-2023-39240 It is identified a format string vulnerability in ASUS RT-A…7.2
• CVE-2023-39244DELL ESI (Enterprise Storage Integrator) for SAP LAMA, versi…9.8
• CVE-2023-39245 DELL ESI (Enterprise Storage Integrator) for SAP LAMA, vers…9.8
• CVE-2023-39246 Dell Encryption, Dell Endpoint Security Suite Enterprise, a…7.3
• CVE-2023-39248 Dell OS10 Networking Switches running 10.5.2.x and above co…7.5
• CVE-2023-39250 Dell Storage Integration Tools for VMware (DSITV) and Del…5.5
• CVE-2023-39251 Dell BIOS contains an Improper Input Validation vulnerabili…6.7
• CVE-2023-39252 Dell SCG Policy Manager 5.16.00.14 contains a broken crypt…5.9
• CVE-2023-39253 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2…7.8
• CVE-2023-39254Dell Update Package (DUP), Versions prior to 4.9.10 contain …7.3
• CVE-2023-39256 Dell Rugged Control Center, version prior to 4.7, contains …7.8