CVE-2023-44283
Last modified
CVE-2023-44283 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC. . EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Supportassist For Business Pcs | >= 3.0, < 3.5.0 |
| Dell | Supportassist For Home Pcs | >= 3.0, < 3.14.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-44283?
How severe is CVE-2023-44283?
How do I fix CVE-2023-44283?
Are you affected by CVE-2023-44283?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST