Supportassist Client Consumer
Approved changes feed: RSS · Atom
cpe:2.3:a:dell:supportassist_client_consumer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Supportassist Client Consumer (3e5ab953-97ad-5217-b381-20382bdf0d8f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-48670 |
vulnerable | 2026-06-08 06:14:27.542796 |
Details available
HIGH (7.3)
Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges.
Published: 2023-12-22T15:57:51.883Z
Updated: 2026-02-25T16:34:32.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39249 |
vulnerable | 2026-06-08 06:09:36.121572 |
Details available
MEDIUM (6.3)
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables IT/System Administrators to perform driver scans and Dell-recommended driver installations without requiring them to log out of the local non-admin user session. However, the granted privilege is limited solely to the SupportAssist User Interface and automatically expires after 15 minutes.
Published: 2024-02-14T07:36:06.873Z
Updated: 2024-08-14T18:11:57.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25535 |
vulnerable | 2026-06-08 05:56:09.169778 |
Details available
HIGH (7.2)
Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023
Published: 2024-02-14T07:23:39.610Z
Updated: 2024-08-06T19:19:14.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34386 |
vulnerable | 2026-06-08 05:44:52.857662 |
Details available
MEDIUM (5.5)
Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
Published: 2023-02-10T20:11:05.046Z
Updated: 2025-03-26T15:43:05.871Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34385 |
vulnerable | 2026-06-08 05:44:52.857178 |
Details available
MEDIUM (5.5)
SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information.
Published: 2023-02-10T20:07:36.141Z
Updated: 2025-03-26T15:43:39.973Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34384 |
vulnerable | 2026-06-08 05:44:52.855433 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34366 |
vulnerable | 2026-06-08 05:44:52.708768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29094 |
vulnerable | 2026-06-08 05:42:46.607359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36297 |
vulnerable | 2026-06-08 05:32:50.732735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36286 |
vulnerable | 2026-06-08 05:32:50.712500 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.