Approved changes feed: RSS · Atom

cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductSupportassist For Business Pcs (5cd4385f-4667-5d65-b2a4-1330ea4303de)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43991 vulnerable 2026-06-08 07:25:10.527421 Details available
MEDIUM (6.3)
SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrary files only in that affected system.
Published: 2025-10-13T14:30:55.576Z
Updated: 2025-10-14T14:34:23.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36613 vulnerable 2026-06-08 07:21:02.114290 Details available
LOW (2.8)
SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
Published: 2025-08-14T14:46:53.032Z
Updated: 2025-08-14T15:08:29.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36612 vulnerable 2026-06-08 07:21:02.112444 Details available
MEDIUM (6.7)
SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Published: 2025-08-14T14:42:06.384Z
Updated: 2026-02-26T17:48:35.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52535 vulnerable 2026-06-08 06:52:15.361064 Details available
HIGH (7.1)
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability, gaining privileges escalation, leading to arbitrary deletion of files and folders from the system.
Published: 2024-12-25T14:41:36.996Z
Updated: 2024-12-26T18:11:19.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37129 vulnerable 2026-06-08 06:39:46.668344 Details available
MEDIUM (6.7)
Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potentially exploit this vulnerability, leading to arbitrary code execution on the system.
Published: 2024-07-31T08:47:57.343Z
Updated: 2026-07-24T12:26:59.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44283 vulnerable 2026-06-08 06:12:39.911170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34389 vulnerable 2026-06-08 05:44:52.860789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34388 vulnerable 2026-06-08 05:44:52.860404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34387 vulnerable 2026-06-08 05:44:52.859907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34386 vulnerable 2026-06-08 05:44:52.857694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34385 vulnerable 2026-06-08 05:44:52.857215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34384 vulnerable 2026-06-08 05:44:52.856595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29095 vulnerable 2026-06-08 05:42:46.608130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29094 vulnerable 2026-06-08 05:42:46.607554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29093 vulnerable 2026-06-08 05:42:46.605645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29092 vulnerable 2026-06-08 05:42:46.603697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.