CVEvulnerability
CVE-2019-3735
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management Vulnerability. A malicious local user can exploit this vulnerability by inheriting a system thread using a leaked thread handle to gain system privileges on the affected machine.
Affected configurations
• dell supportassist for home pcs 2.2
• dell supportassist for home pcs 2.2.1
• dell supportassist for home pcs 2.2.2
• dell supportassist for home pcs 2.2.3
• dell supportassist for home pcs 3.0
• dell supportassist for home pcs 3.0.1
• dell supportassist for home pcs 3.0.2
• dell supportassist for home pcs 3.1
• dell supportassist for home pcs 3.2
• dell supportassist for home pcs 3.2.1
• dell supportassist for business pcs 2.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.dell.com/support/article/sln317453 Vendor Advisory
- http://www.dell.com/support/article/sln317453 Vendor Advisory